*.usremodelers.com
- The Home Depot -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 42:84:b3:8c:9f:7f:98:e8:00:00:00:00:50:f9:43:41 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
The Home Depot
Organization:
The Home Depot
Organization unit: IT Security
Organization unit: IT Security
State / Province:
Georgia
Locality: Atlanta
Country: US
Locality: Atlanta
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 42:84:b3:8c:9f:7f:98:e8:00:00:00:00:50:f9:43:41Serial Number (int): 88418072599755222724665386268567880513
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 1e:f0:0d:75:8e:4c:a6:02:e9:f6:67:6c:a5:60:01:df:bd:2d:37:98
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): ed:95:e5:fd:8b:38:ea:2d:b9:6d:4d:42:e6:d4:8b:8b:ec:f0:8f:d8
Fingerprint (sha256): 20:df:fa:0a:9f:53:5b:65:3a:3a:37:16:82:06:cd:d3:12:b0:d2:47:7a:37:f4:6a:67:5d:d6:e4:1d:86:bf:d9
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.usremodelers.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.usremodelers.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.usremodelers.com
usremodelers.com
usremodelers.com
Other certificates including the domain name usremodelers.com
(limited to 100 certificates)
c21cabinetrefacing.usremodelers.com
thehomeupgraders.com
thecabinetupgraders.com
theclosetupgraders.com
usrappt.com
homedepothomeorg.com
c21cabinetrefacing.usremodelers.com
*.facelifters.com
homedepotcabinetrefacing.com
homedepotcabinetrefacing.usremodelers.com
m.usremodelers.com
facelifters.ca
m.usremodelers.com
m.usremodelers.com
m.usremodelers.com
homedepotbathrefacing.com
hd-refacing.com
homedepothomeorg.com
hd-refacing.com
faceliftersrefacing.com
bathroomrefacing.ca
thebathroomupgraders.com
c21homeimprovements.usremodelers.com
usremodelers.com
homedepotbathroomrefacing.com
*.usremodelers.com
faceliftersca.usremodelers.com
century21windowsonline.usremodelers.com
sales.usremodelers.com
faceliftersrefacing.usremodelers.com
usremodelers.com
hd-refacing.com
bathroomrefacing.com
faceliftersrefacing.com
homedepotcabinetrefacing.usremodelers.com
bathrefacing.usremodelers.com
usremodelers.com
usrappt.usremodelers.com
facelifters.ca
homedepothomeorg.com
faceliftersrefacing.com
c21homeimprovements.com
homedepotcabinetrefacing.usremodelers.com
bathroomrefacing.ca
century21windowsonline.usremodelers.com
c21homeimprovements.com
homedepotbathroomrefacing.com
bathroomrefacing.ca
usremodelers.com
c21homeimprovements.com
c21homeimprovements.com
thebathroomupgraders.com
homedepothomeorg.com
homedepothomeorg.com
facelifters.ca
m.usremodelers.com
homedepotcabinetrefacing.com
bathroomrefacing.usremodelers.com
century21windowsonline.usremodelers.com
homedepothomeorg.com
*.usremodelers.com
thegarageupgraders.com
thegarageupgraders.com
homedepotbathrefacing.com
usrappt.com
bathroomrefacing.com
thecabinetupgraders.com
thecabinetupgraders.com
homedepotbathroomrefacing.com
m.usremodelers.com
sales.usremodelers.com
usrappt.com
*.usremodelers.com
bathroomrefacing.com
thehomeupgraders.com
century21windowsonline.usremodelers.com
faceliftersrefacing.com
usrappt.com
homedepothomeorg.com
homedepotbathrefacing.usremodelers.com
c21cabinetrefacing.usremodelers.com
c21homeimprovements.com
usremodelers.com
bathroomrefacing.ca
thebathroomupgraders.com
homedepotcabinetrefacing.usremodelers.com
m.usremodelers.com
thehomeupgraders.com
thehomeupgraders.com
c21homeimprovements.com
homedepotcabinetrefacing.usremodelers.com
homedepotbathroomrefacing.com
theclosetupgraders.com
sales.usremodelers.com
bathroomrefacing.ca
theclosetupgraders.com
bathroomrefacing.ca
cabinetrefacing.usremodelers.com
homedepotcabinetrefacing.com
homedepotbathrefacing.com
thehomeupgraders.com
thecabinetupgraders.com
theclosetupgraders.com
usrappt.com
homedepothomeorg.com
c21cabinetrefacing.usremodelers.com
*.facelifters.com
homedepotcabinetrefacing.com
homedepotcabinetrefacing.usremodelers.com
m.usremodelers.com
facelifters.ca
m.usremodelers.com
m.usremodelers.com
m.usremodelers.com
homedepotbathrefacing.com
hd-refacing.com
homedepothomeorg.com
hd-refacing.com
faceliftersrefacing.com
bathroomrefacing.ca
thebathroomupgraders.com
c21homeimprovements.usremodelers.com
usremodelers.com
homedepotbathroomrefacing.com
*.usremodelers.com
faceliftersca.usremodelers.com
century21windowsonline.usremodelers.com
sales.usremodelers.com
faceliftersrefacing.usremodelers.com
usremodelers.com
hd-refacing.com
bathroomrefacing.com
faceliftersrefacing.com
homedepotcabinetrefacing.usremodelers.com
bathrefacing.usremodelers.com
usremodelers.com
usrappt.usremodelers.com
facelifters.ca
homedepothomeorg.com
faceliftersrefacing.com
c21homeimprovements.com
homedepotcabinetrefacing.usremodelers.com
bathroomrefacing.ca
century21windowsonline.usremodelers.com
c21homeimprovements.com
homedepotbathroomrefacing.com
bathroomrefacing.ca
usremodelers.com
c21homeimprovements.com
c21homeimprovements.com
thebathroomupgraders.com
homedepothomeorg.com
homedepothomeorg.com
facelifters.ca
m.usremodelers.com
homedepotcabinetrefacing.com
bathroomrefacing.usremodelers.com
century21windowsonline.usremodelers.com
homedepothomeorg.com
*.usremodelers.com
thegarageupgraders.com
thegarageupgraders.com
homedepotbathrefacing.com
usrappt.com
bathroomrefacing.com
thecabinetupgraders.com
thecabinetupgraders.com
homedepotbathroomrefacing.com
m.usremodelers.com
sales.usremodelers.com
usrappt.com
*.usremodelers.com
bathroomrefacing.com
thehomeupgraders.com
century21windowsonline.usremodelers.com
faceliftersrefacing.com
usrappt.com
homedepothomeorg.com
homedepotbathrefacing.usremodelers.com
c21cabinetrefacing.usremodelers.com
c21homeimprovements.com
usremodelers.com
bathroomrefacing.ca
thebathroomupgraders.com
homedepotcabinetrefacing.usremodelers.com
m.usremodelers.com
thehomeupgraders.com
thehomeupgraders.com
c21homeimprovements.com
homedepotcabinetrefacing.usremodelers.com
homedepotbathroomrefacing.com
theclosetupgraders.com
sales.usremodelers.com
bathroomrefacing.ca
theclosetupgraders.com
bathroomrefacing.ca
cabinetrefacing.usremodelers.com
homedepotcabinetrefacing.com
homedepotbathrefacing.com
Certificate
The complete raw certificate details for *.usremodelers.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIQQoSzjJ9/mOgAAAAAUPlDQTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTEwMjgxMzQwNThaFw0yMTEwMjgxNDEwNTdaMH0xCzAJBgNVBAYTAlVTMRAwDgYD VQQIEwdHZW9yZ2lhMRAwDgYDVQQHEwdBdGxhbnRhMRcwFQYDVQQKEw5UaGUgSG9t ZSBEZXBvdDEUMBIGA1UECxMLSVQgU2VjdXJpdHkxGzAZBgNVBAMMEioudXNyZW1v ZGVsZXJzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzvxVnU zETIfqwqvsIouj3AT3fnjYL82TyjBAE5jPKWfXWr4FLkq0uyOGXbDdwPv4Y2qjtj bQ/sBKVfFA4ZGhiOqo3hesY+zsp0ZSv8OoWrMVVxgleDrBXf989wKLyDZilh74te stGT4ZMfEWBrg/g3z4pFX99f4QakcfSI4YN/q4a4GusojU9L2dd9iBX3i/kSt+2r 7w0ZgupkiB288r364/H0Mc864GpHPcOKDSFq7QT0fchppiFhlWHnBDmDdv+LrtvU LFcBfoatkSGb4wmVSQ6taosLMCOij26dfPVUzmEuDq+rDkN5enead3/wP7bd82Ig utPrSQ3j4gfo2cECAwEAAaOCA5YwggOSMC8GA1UdEQQoMCaCEioudXNyZW1vZGVs ZXJzLmNvbYIQdXNyZW1vZGVsZXJzLmNvbTCCAfcGCisGAQQB1nkCBAIEggHnBIIB 4wHhAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFuErSmqwAA BAMASDBGAiEApF4VOTeFhOgDm3IKr6Ejs8vlJ+euNWVX1weDbzCmPIsCIQCpEiaM E5ZU84H787ABYaoih/pHH56tLr2LHZWWP1At4AB2AFWB1MIWkDYBSuoLm1c8U/DA 5Dh4cCUIFy+jqh0HE9MMAAABbhK0prEAAAQDAEcwRQIhAI3Sukm8CNUqfRZlalc1 YwJfGGY48fKtGPkYVfz+RUBCAiBhf2e/r8pMSGYVnTMBOGiBeLk3jdox9UOiNzJD +tED3wB2AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABbhK0pqEA AAQDAEcwRQIgGIgmy2X5po8H+lHrkzXKeAv5F//fpSxvM7F6ZNBOpgECIQC7xvOB rQfunWZmy9hGmIVmi/jI/B4mEYzBnOpKBkiX7AB2AKS5CZC0GFgUh7sTosxncAo8 NZgE+RvfuON3zQ7IDdwQAAABbhK0posAAAQDAEcwRQIhAOFHmsbCqWKQc5XUoEDL gZ3DQaWssbGsuBFDqzkoqVWqAiA9ARXSXmbyDPwvU5yDmzCsAMprtPXsHPxkPPQU j6l65zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2 ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEW Gmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcB AQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsG AQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIw HwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFB7wDXWO TKYC6fZnbKVgAd+9LTeYMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBABvB 2dFM3ochw2fPyCaWcTLP8zfFCLtbOfyXwjTBTMlimmPLMcDzMyP+k5qkcaLsEyOm W71ZmllcJWAM4+TB8USaC751fHelGPahrXcV74tn0KAQAc+T3w8l6cZbxeUqoEp6 KA+8XilSAJlvJBlEajha0Y6aJJwpykLtnCB8vc2scwDWJm1/IICKbyORJAOtbp8C fFKFc85ZGGTtuzw4C31enLmTlv67qxvfjqfgi1HJ3sju2vqnHasmMV+w/CF863Zm iO1HbM8KvDQ2fhmOhl53v3d9TfmgayCuiBjeDEya8Jentsf8ji+c7TVzYZxRrUlB 0eWn2SkB5E8OLq227kk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO/FWdTMRMh+rCq+wii6 PcBPd+eNgvzZPKMEATmM8pZ9davgUuSrS7I4ZdsN3A+/hjaqO2NtD+wEpV8UDhka GI6qjeF6xj7OynRlK/w6hasxVXGCV4OsFd/3z3AovINmKWHvi16y0ZPhkx8RYGuD +DfPikVf31/hBqRx9Ijhg3+rhrga6yiNT0vZ132IFfeL+RK37avvDRmC6mSIHbzy vfrj8fQxzzrgakc9w4oNIWrtBPR9yGmmIWGVYecEOYN2/4uu29QsVwF+hq2RIZvj CZVJDq1qiwswI6KPbp189VTOYS4Or6sOQ3l6d5p3f/A/tt3zYiC60+tJDePiB+jZ wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 88418072599755222724665386268567880513 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 13:40:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-28 14:10:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Home Depot' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.usremodelers.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19811411013159704547738876305684179512773645124161902455775532676329059864504947975879307597876957277957020908596385590674047105744994802993663400291753236520552517450994774197293207038208929571635855392709578104310409318833936391334356297334766650484023723039419583623095989109573355908938558008221499055096412064850876671504973408575315268392872233591386283782772438343961048740388921339618263480812611944088868989456675326157601118535571079901881689293642240500607247464808440333299804324884033138848631053139013691397333490284356300850034538048686888898836353397046890014934865264925255148866666491518325239634369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usremodelers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usremodelers.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ef00d758e4ca602e9f6676ca56001dfbd2d3798 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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