three.co.uk
- Hutchison 3G UK Ltd. -
Issued by Entrust Certification Authority - L1M
About this certificate
This digital certificate with serial number 51:ec:ac:7d:bd:cb:c0:4c:00:00:00:00:54:cf:e4:d9 was issued on by Entrust, Inc..
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Hutchison 3G UK Ltd.
Company registration number:
03885486
Organization: Hutchison 3G UK Ltd.
Organization: Hutchison 3G UK Ltd.
Locality:
Maidenhead
Country: GB
Country: GB
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 51:ec:ac:7d:bd:cb:c0:4c:00:00:00:00:54:cf:e4:d9Serial Number (int): 108896348253903534289829935423297676505
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: b3:59:85:ef:83:2d:bc:df:8b:33:f3:ba:b3:ab:82:b3:9b:70:46:ec
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a
Fingerprint (sha1): 1f:a1:21:94:07:f9:8d:34:bc:ab:52:4c:8c:66:47:80:76:41:90:0f
Fingerprint (sha256): 20:ce:e3:4d:34:1e:a2:a1:58:1c:3e:64:3b:05:c3:df:fe:c3:79:97:96:45:43:dd:7d:df:e0:c2:d1:bd:3b:d6
Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1m.crl
Check the revocation status for certificate three.co.uk
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for three.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
three.co.uk
www.three.co.uk
support.three.co.uk
sso.three.co.uk
my3.three.co.uk
www.three.co.uk
support.three.co.uk
sso.three.co.uk
my3.three.co.uk
Other certificates including the domain name three.co.uk
(limited to 100 certificates)
f.chat3.three.co.uk
mva.testbed.three.co.uk
smetrics.three.co.uk
owa.three.co.uk
hem-webservices.three.co.uk
www.businesstools.three.co.uk
users-pdt.three.co.uk
warehouse.three.co.uk
jobs.three.co.uk
secure06.lithium.com
secure07.stage.lithium.com
*.three.co.uk
connect.three.co.uk
three.co.uk
2nddomain.three.co.uk
sslcertificate2.queue-it.net
www.three.co.uk
preprod-store.three.co.uk
sslcertificate2.queue-it.net
test-staging-active.three.co.uk
mail.three.co.uk
three.co.uk
accessories.three.co.uk
secure06.lithium.com
secure06.lithium.com
locator.three.co.uk
smetrics.three.co.uk
obsp03clust-dfe-vip.it.three.co.uk
mconsole.three.co.uk
three.co.uk
www.three.co.uk
blog1.three.co.uk
smobile.three.co.uk
2nddomain.three.co.uk
man-webservices.three.co.uk
secure07.stage.lithium.com
intranet.three.co.uk
secure06.lithium.com
b2c-mobile-buat.testbed.three.co.uk
mifioffers.three.co.uk
hem-webservices.three.co.uk
profile.three.co.uk
test-staging-active.three.co.uk
secure07.stage.lithium.com
repair.three.co.uk
reseller-test.three.co.uk
threeanalyst.three.co.uk
threerescue.three.co.uk
m.services.three.co.uk
staging-active.three.co.uk
sslcertificate2.queue-it.net
wholesale.three.co.uk
mail.three.co.uk
qc.three.co.uk
mail.three.co.uk
business.three.co.uk
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
misp.three.co.uk
secure06.lithium.com
fila.ingressorapido.com.br
sslcertificate2.queue-it.net
locator.three.co.uk
sghp.three.co.uk
smetrics.three.co.uk
sslcertificate2.queue-it.net
my3.three.co.uk
test-staging-active.three.co.uk
ses.three.co.uk
sslcertificate2.queue-it.net
intranet.three.co.uk
secure07.stage.lithium.com
auth.three.co.uk
intranet.three.co.uk
accessories.three.co.uk
dl.threerescue.three.co.uk
three.co.uk
three.co.uk
sslcertificate2.queue-it.net
www.businesstools.three.co.uk
me.three.co.uk
mva.testbed.three.co.uk
threerescue.three.co.uk
access.three.co.uk
mstrprod.three.co.uk
secure06.lithium.com
sslcertificate2.queue-it.net
registration.three.co.uk
api-webservices.three.co.uk
mva.testbed.three.co.uk
smetrics.three.co.uk
owa.three.co.uk
hem-webservices.three.co.uk
www.businesstools.three.co.uk
users-pdt.three.co.uk
warehouse.three.co.uk
jobs.three.co.uk
secure06.lithium.com
secure07.stage.lithium.com
*.three.co.uk
connect.three.co.uk
three.co.uk
2nddomain.three.co.uk
sslcertificate2.queue-it.net
www.three.co.uk
preprod-store.three.co.uk
sslcertificate2.queue-it.net
test-staging-active.three.co.uk
mail.three.co.uk
three.co.uk
accessories.three.co.uk
secure06.lithium.com
secure06.lithium.com
locator.three.co.uk
smetrics.three.co.uk
obsp03clust-dfe-vip.it.three.co.uk
mconsole.three.co.uk
three.co.uk
www.three.co.uk
blog1.three.co.uk
smobile.three.co.uk
2nddomain.three.co.uk
man-webservices.three.co.uk
secure07.stage.lithium.com
intranet.three.co.uk
secure06.lithium.com
b2c-mobile-buat.testbed.three.co.uk
mifioffers.three.co.uk
hem-webservices.three.co.uk
profile.three.co.uk
test-staging-active.three.co.uk
secure07.stage.lithium.com
repair.three.co.uk
reseller-test.three.co.uk
threeanalyst.three.co.uk
threerescue.three.co.uk
m.services.three.co.uk
staging-active.three.co.uk
sslcertificate2.queue-it.net
wholesale.three.co.uk
mail.three.co.uk
qc.three.co.uk
mail.three.co.uk
business.three.co.uk
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
misp.three.co.uk
secure06.lithium.com
fila.ingressorapido.com.br
sslcertificate2.queue-it.net
locator.three.co.uk
sghp.three.co.uk
smetrics.three.co.uk
sslcertificate2.queue-it.net
my3.three.co.uk
test-staging-active.three.co.uk
ses.three.co.uk
sslcertificate2.queue-it.net
intranet.three.co.uk
secure07.stage.lithium.com
auth.three.co.uk
intranet.three.co.uk
accessories.three.co.uk
dl.threerescue.three.co.uk
three.co.uk
three.co.uk
sslcertificate2.queue-it.net
www.businesstools.three.co.uk
me.three.co.uk
mva.testbed.three.co.uk
threerescue.three.co.uk
access.three.co.uk
mstrprod.three.co.uk
secure06.lithium.com
sslcertificate2.queue-it.net
registration.three.co.uk
api-webservices.three.co.uk
Certificate
The complete raw certificate details for three.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIQUeysfb3LwEwAAAAAVM/k2TANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDE0IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0x OTA2MTExMzU4MzlaFw0yMDA3MjAxNDI4MzZaMIGeMQswCQYDVQQGEwJHQjETMBEG A1UEBxMKTWFpZGVuaGVhZDETMBEGCysGAQQBgjc8AgEDEwJHQjEdMBsGA1UEChMU SHV0Y2hpc29uIDNHIFVLIEx0ZC4xHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMREwDwYDVQQFEwgwMzg4NTQ4NjEUMBIGA1UEAxMLdGhyZWUuY28udWswggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyj/Kf0n+e0cgtP0QXuAh1sryj bvCT/du0O6gdUxTfp4Ka7XwnTpptdKTIFwk3vrRH3iyjC3co1R1gB/y5ooiA0sjz WRiZ86J4eOxo6uRsQoWDLjpr5FhbdIvgsLDP4uYtQvZDGcEAUjw2ltpKq3xSETKf AnlKkUypZ/JgEgh0hh7tgZDxoskuVj1lAbxZmxmXfRECvVe4iT+tm4Qe4/+6z8+O ilmQWMQ7P0bw7S2TESWKDkhYMdPW1LO9+vXkddSCqIRh6hsoVr0hDR0/3vHWVG37 avKII++uYnJZHuYe3Y56Bm+nPg7bmRlA22XjQi5Nwe08hsbNAwI5+ymrNsUZAgMB AAGjggHeMIIB2jATBgorBgEEAdZ5AgQDAQH/BAIFADBeBgNVHREEVzBVggt0aHJl ZS5jby51a4IPd3d3LnRocmVlLmNvLnVrghNzdXBwb3J0LnRocmVlLmNvLnVrgg9z c28udGhyZWUuY28udWuCD215My50aHJlZS5jby51azAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGgGCCsGAQUFBwEBBFwwWjAj BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKG J2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFtLWNoYWluMjU2LmNlcjAzBgNVHR8E LDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMW0uY3JsMEoG A1UdIARDMEEwNgYKYIZIAYb6bAoBAjAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3 LmVudHJ1c3QubmV0L3JwYTAHBgVngQwBATAfBgNVHSMEGDAWgBTD99C1KjCtrw2R IXA5VN28iXDHOjAdBgNVHQ4EFgQUs1mF74MtvN+LM/O6s6uCs5twRuwwCQYDVR0T BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAW+QbRow3j7HBiSzWy0jvmUUkIwUVwLyI vxICwqCJXlhwgXK/civM7+A6JFhIVIIxRVX2B/eC2TqLgjmhyS9/w4gn8fnpDo8F kqEFaZFRAeGNNMdfdvuuPmK0jiuPtxgOhoiL2+j0ui5Z85jSvQnqHpcPk54/cvPH OXRNM3B8SnmELepuXnHiMFzh8Jkm75T2qe3Rtqwn5BCAKIw6B2sLGaa4d3t/+lW7 vKZgStx9YKyYBkoeWoPNaRihsd/gFoWLxTicxSB3SwaCnLvFO41HAwlqfjdvO2Uc 55yBOVKX0GZJuJzXDVPzu84KzjG4AbfLZkQVzzjuTk18h7Dxh1qamw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso/yn9J/ntHILT9EF7gI dbK8o27wk/3btDuoHVMU36eCmu18J06abXSkyBcJN760R94sowt3KNUdYAf8uaKI gNLI81kYmfOieHjsaOrkbEKFgy46a+RYW3SL4LCwz+LmLUL2QxnBAFI8NpbaSqt8 UhEynwJ5SpFMqWfyYBIIdIYe7YGQ8aLJLlY9ZQG8WZsZl30RAr1XuIk/rZuEHuP/ us/PjopZkFjEOz9G8O0tkxElig5IWDHT1tSzvfr15HXUgqiEYeobKFa9IQ0dP97x 1lRt+2ryiCPvrmJyWR7mHt2OegZvpz4O25kZQNtl40IuTcHtPIbGzQMCOfspqzbF GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 108896348253903534289829935423297676505 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 13:58:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-20 14:28:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maidenhead' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hutchison 3G UK Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '03885486' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'three.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22541401565655409263599776139186257691045034732700349078484525585493710851169074440192160252137518525248336960532931215237501699857924850703535537459985900096816423479321148142777306799888273089162783103536686069058447794220301031914418778070141086621657929471082609662637974850387236310099917881149569303826162637014557771270632053526587639079771995757647079579474783573574973079930021376285202444442134871736576641501457545107499112344903395610507461208465610456508743353790072829276015525817246394672059682706063383419789179935063919567157712812525943838139531154385734427501070712778253357844720789719139755672857 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my3.three.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b35985ef832dbcdf8b33f3bab3ab82b39b7046ec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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