mymail.gianteagle.com

- Giant Eagle Inc. -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1d:72:73 was issued on by Entrust, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Giant Eagle Inc.

Organization: Giant Eagle Inc.
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1d:72:73
Serial Number (int): 1276998259
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 00:bb:25:53:fb:25:3d:7e:51:78:e8:ee:d1:b9:0a:8e:48:cf:22:f9
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 29:46:3c:ce:cb:ed:cd:b7:05:0d:6f:e0:2f:9b:63:4b:a1:e1:eb:0f
Fingerprint (sha256): 21:20:f0:3c:59:4e:6b:bb:c7:f0:84:c7:10:a3:07:dd:cb:ef:e8:6b:fe:f3:49:ed:2f:d9:6d:aa:24:96:e6:fa

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate mymail.gianteagle.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mymail.gianteagle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mymail.gianteagle.com
excaskdc02.corp.gianteagle.com
autodiscover.gianteagle.com
excaskdc01.corp.gianteagle.com
excascdc01.corp.gianteagle.com
excascdc02.corp.gianteagle.com
webconf.gianteagle.com
chat.gianteagle.com
gemail.gianteagle.com
legacy.gianteagle.com
sip.gianteagle.com
meetings.gianteagle.com

Other certificates including the domain name gianteagle.com

(limited to 100 certificates)
m.gianteagle.com
enrollgateway.gianteagle.com
sip.gianteagle.com
geapi-cc.gianteagle.com
servicesdev.gianteagle.com
pickup.belkdev.com
sso.gianteagle.com
myappssecure.gianteagle.com
api.gianteagle.com
protocolphysicianportal.pharmacy.gianteagle.com
account.gianteagle.com
mp.shop.gianteagle.com
*.api.gianteagle.com
tlmprodtp.gianteagle.com
uc13.janrainengage.com
contacts.gianteagle.com
sso.gianteagle.com
rad.gianteagle.com
www.jobs.gianteagle.com
portal.gianteagle.com
rxinformed.gianteagle.com
servicesdevnb.gianteagle.com
specialtyrx.gianteagle.com
eoffers.gianteagle.com
mymail.gianteagle.com
adfsservice.gianteagle.com
curbsideexpress.gianteagle.com
ctsecure.mywebgrocer.com
incs.gianteagle.com
hybrid.gianteagle.com
account.gianteagle.com
myapps.gianteagle.com
talent.gianteagle.com
3.janrainsso.com
my.gianteagle.com
account-qa.gianteagle.com
geapi.gianteagle.com
www.gianteagle.com
*.opx.janrain.ws
payment.gianteagle.com
jobs.gianteagle.com
shop.gianteagle.com
curbsideexpress.gianteagle.com
marketpartnersqa.gianteagle.com
ecoupons.gianteagle.com
portal.gianteagle.com
vendorconnect.gianteagle.com
mymail.gianteagle.com
services.gianteagle.com
myapps.gianteagle.com
rdcb.gianteagle.com
sso.gianteagle.com
order.gianteagle.com
curbsideexpress.gianteagle.com
forms.gianteagle.com
try.gianteagle.com
cakes.gianteagle.com
marketpartners.gianteagle.com
login.accounts.gianteagle.com
tlmprodca.gianteagle.com
www.gianteagle.com
geapi-cc.gianteagle.com
curbside.cpk.com
curbsideexpress.gianteagle.com
try.gianteagle.com
msbi.gianteagle.com
bsnee.gianteagle.com
payment-int.gianteagle.com
*.gianteagle.com
fhf.shopthefastlane.com
rad.gianteagle.com
partners.gianteagle.com
pickup.shop.gianteagle.com
mynetinfosec.gianteagle.com
share.gianteagle.com
forms.gianteagle.com
partners2.gianteagle.com
cakes.gianteagle.com
uc13.janrainengage.com
b2b-gtwy.gianteagle.com
flybuy.radiusnetworks.com
sso.gianteagle.com
passwordreset.gianteagle.com
mymail.gianteagle.com
ctsecure.mywebgrocer.com
*.janrainsso.com
tlmprodmip.gianteagle.com
contacts.gianteagle.com
exop.gianteagle.com
try.gianteagle.com
expenses.gianteagle.com
QA.gianteagle.com
share.gianteagle.com
Login.maximuscle.com
expenses.gianteagle.com
curbside.cpk.com
www.gianteagle.com
contacts.gianteagle.com
passwordreset.gianteagle.com
geapi-test.gianteagle.com

Certificate

The complete raw certificate details for mymail.gianteagle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIETB1yczANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMjA3MjYxMzUxMTVaFw0xMzA3MjUx
NjA0MjJaMHQxCzAJBgNVBAYTAlVTMRUwEwYDVQQIEwxQZW5uc3lsdmFuaWExEzAR
BgNVBAcTClBpdHRzYnVyZ2gxGTAXBgNVBAoTEEdpYW50IEVhZ2xlIEluYy4xHjAc
BgNVBAMTFW15bWFpbC5naWFudGVhZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+HfQxiVf38L/Kgjez9x3L9r3Ow/rrRkcCYJR3YMLhEA/aD
aqCILKjBdd6vPq+wuygnHsY7fCxeRf81+2lci2VW/a3XdhtYLTJmkyYWJDNKxz79
E64kdNJsOYofXKO9oSxIByKfOBt+riiXjGT4ral8/D6isjU9NInP5ADSrI/AEg5H
fg8tFsJeu/0V+wo0TM0hlosqZQUqhXuHwqdeUK44aUEvHOn2l61NxALy75bx/Pkq
D4/25XFMDRoq0oEAJQZ+pZ1dTBoU5TDn65Fnqn/pFFccBpzGWtxRBQsQNtTF0s6W
KCqHuHVHO3LMxvVZ2c+XT4H0FjDcb0tpDccbLq8CAwEAAaOCAq8wggKrMAsGA1Ud
DwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCww
KjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFjLmNybDBkBggr
BgEFBQcBAQRYMFYwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0
MC8GCCsGAQUFBzAChiNodHRwOi8vYWlhLmVudHJ1c3QubmV0LzIwNDgtbDFjLmNl
cjBKBgNVHSAEQzBBMDUGCSqGSIb2fQdLAjAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
d3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwggFJBgNVHREEggFAMIIBPIIV
bXltYWlsLmdpYW50ZWFnbGUuY29tgh5leGNhc2tkYzAyLmNvcnAuZ2lhbnRlYWds
ZS5jb22CG2F1dG9kaXNjb3Zlci5naWFudGVhZ2xlLmNvbYIeZXhjYXNrZGMwMS5j
b3JwLmdpYW50ZWFnbGUuY29tgh5leGNhc2NkYzAxLmNvcnAuZ2lhbnRlYWdsZS5j
b22CHmV4Y2FzY2RjMDIuY29ycC5naWFudGVhZ2xlLmNvbYIWd2ViY29uZi5naWFu
dGVhZ2xlLmNvbYITY2hhdC5naWFudGVhZ2xlLmNvbYIVZ2VtYWlsLmdpYW50ZWFn
bGUuY29tghVsZWdhY3kuZ2lhbnRlYWdsZS5jb22CEnNpcC5naWFudGVhZ2xlLmNv
bYIXbWVldGluZ3MuZ2lhbnRlYWdsZS5jb20wHwYDVR0jBBgwFoAUHvGriQb4SQ8B
M3fuFHruGXyTKE0wHQYDVR0OBBYEFAC7JVP7JT1+UXjo7tG5Co5IzyL5MAkGA1Ud
EwQCMAAwDQYJKoZIhvcNAQEFBQADggEBAAuQDer1Y1bQzPUNzHVP7/7DO5ywdBR6
taiLNXN9s31+5nskW3JiyxUZ+LPic6OM4qxqPZAVmeBQyBJfJ8MQVJVEv0Vem2WC
mqtMiO7AqLtYFTr27UO8a+1QBsHdj/Ql8hrMUG9SymSH7eOsIxdqXLCKIDnV0uOe
k12munR5R9RZ/7aHiR4sC3Ui8++j4FVk5Xoh2xHeHQdbBgB+GYGZ7YN4hf57jOjP
1X8LerYKgdKJGe1ucz+Y+tQ+b555gKKpW3WQWTalNfd69qGXpr9vOujvo4U46EIZ
Fq7HbYA0ZxtSehmhVXYbQQSPHKTFitOBft4Mi2LZj72sz+IvO2TV2RE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4d9DGJV/fwv8qCN7P3H
cv2vc7D+utGRwJglHdgwuEQD9oNqoIgsqMF13q8+r7C7KCcexjt8LF5F/zX7aVyL
ZVb9rdd2G1gtMmaTJhYkM0rHPv0TriR00mw5ih9co72hLEgHIp84G36uKJeMZPit
qXz8PqKyNT00ic/kANKsj8ASDkd+Dy0Wwl67/RX7CjRMzSGWiyplBSqFe4fCp15Q
rjhpQS8c6faXrU3EAvLvlvH8+SoPj/blcUwNGirSgQAlBn6lnV1MGhTlMOfrkWeq
f+kUVxwGnMZa3FEFCxA21MXSzpYoKoe4dUc7cszG9VnZz5dPgfQWMNxvS2kNxxsu
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276998259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-26 13:51:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-25 16:04:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Giant Eagle Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mymail.gianteagle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20138702344379126699826689383468551802061280231546755368140984106016952794230822658791194770387924113246046980294195539267903619794199037431615019983218621203233632855844784045259490519312222855223562484060141968014111321647269693668936156550086547251601331759561113563473904470278865433287560064311552523857542257346977411976135706253543152208292605465452361561987469820619428441578661094872652480244075278072534271257430272643949500921264124308106039799227485804148055158790510049365785322754004707809331045616341884071973497750048432337390713270583098619328536947587731532382519670834638514314638043995822196731567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymail.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excaskdc02.corp.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excaskdc01.corp.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excascdc01.corp.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excascdc02.corp.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemail.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetings.gianteagle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00bb2553fb253d7e5178e8eed1b90a8e48cf22f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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