secure.mdl.io

- Mindfireinc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 5e:dd:98:97:ad:e2:5f:57:00:00:00:00:50:fc:1d:07 was issued on by Entrust, Inc..

With 220 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mindfireinc

Organization: Mindfireinc
State / Province: California
Locality: Irvine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:dd:98:97:ad:e2:5f:57:00:00:00:00:50:fc:1d:07
Serial Number (int): 126098024153045157830690730075697716487
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9a:13:14:db:99:98:0b:ca:72:c5:b4:d2:50:6e:65:b0:a8:f3:49:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 63:83:83:01:a3:44:95:89:23:8d:d4:af:e5:99:8c:87:27:32:57:a8
Fingerprint (sha256): 22:70:e7:6f:8a:c9:0e:83:a8:fe:6c:2e:c0:0f:71:e0:bb:ce:25:24:c3:cb:c3:32:a5:af:0a:1b:e3:ff:4e:b1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate secure.mdl.io

220

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.mdl.io
letsgo.lasell.edu
www.albion-college.com
www.BHGLoan.com
be.tabor.edu
www.BHGcards.com
www.bhgloans.com
www.BHGProLoan.com
www.bhgpowercard.com
www.igive2epic.com
studio.mdl.io
welcometothefamily-customerdirect.m.mdl.io
petcothinkadoptionfirst.m.mdl.io
studio.afw.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io
microsite.container.mdl.io
members.championshipcommitment.com
www.mybhgcards.com
www.mycapitalnow.com
tracking.mdl.io
www.supportecfs.org
www.supporthm.org
applymjur.stmarytx.edu
*.my-dv.com
your.lr.edu
www.grouplegalplanoffer.com
www.investdbq.com
rewards.kewadin.com
itspersonal.martinmethodist.edu
be.hendrix.edu
www.metpdpnetworkdev.com
www.bhgandbanks.com
www.metpdp.com
getsxm.com
www.getsxm.com
monitor.mdl.io
werhome.oc.edu
www.mobltycarpetone.com
hippos.win2wild.com
www.givingmu.com
www.welcometoharvey.com
*.secure.mdl.io
www.edwardsupdate.ca
apply.keystone.edu
promise.keystone.edu
getinfo.cps.gwu.edu
www.lvcscholarship.com
optin.onestarrewards.com
www.BHGPersonal.com
belongat.bw.edu
www.firespringpromo.com
mymccalling.com
DiscoverLACollege.com
faulknerlawschool.com
discoverShorter.com
BPCforMe.com
TransfertoMC.com
YourMCcalling.com
bstrong.wtamu.edu
motiontosucceed.com
www.wpc4cc.com
www.supportsacredheartgreenwich.org
give.dwight.edu
www.cornhuskerbankpowerchecking.com
www.metdhmo.com
experience.coker.edu
imustgo.mhu.edu
go.belmontabbeycollege.edu
www.fdlcrewards.com
www.arcfulfill.com
*.getkasasacash.com
*.getkasasacashback.com
www.c1mm.com
louisianacollegedigital.com
shorterudigital.com
onelimestone.com
www.explorehpu.com
www.explorebrenau.com
www.explorewwc.com
www.explorewestminster.com
www.yourloyola.com
www.gohusson.com
www.explorelesley.com
www.explorelvc.com
www.discoveraic.com
www.youbelongatwells.com
www.gonewmanu.com
www.explorenewcollege.com
www.thinkmeredith.com
connect.linfield.edu
www.championshipcommitment.com
*.getkasasaloans.com
lifecall.truett.edu
opportunity.shawu.edu
weare.su.edu
www.powerchecking.net
app.beaconcollege.edu
www.mbugifted.org
designers.laserimagenc.com
discover.daemen.edu
www.harrychapinsurvey.org
my.lanepress.com
www.Freshstartfast.com
www.clarkhighered.info
www.Needfreshstart.com
www.explorealbion.com
www.discoveruindy.com
www.gofloridapoly.com
www.discoversmcm.com
www.discoverwitt.com
www.explorebellarmine.com
www.discovervalpo.com
www.myelmsexperience.com
www.exploredepauw.com
www.choosegannon.com
www.manchesterbschool.com
www.augradprograms.com
www.harvardextnow.com
www.ptkatharvard.com
www.summeratharvard.com
forms.microf.com
online.onelimestone.com
ready.xula.edu
www.newrezrefi.com
limestone.education
www.supportbrooke.org
www.avicasinorewards.com
www.casinookrewards.com
www.commercialmaintenanceprogram.ca
www.goldriverrewards.com
www.givingbackcanes.com
*.sharekasasaloans.com
giveaways.thumbcellular.com
www.accessmycardoffer.com
www.limestone-digital.com
www.faualumnimembership.com
www.afgarchives.com
Identity.mdl.io
Edge.mdl.io
Client.mdl.io
www.buildingbcs.com
www.blackbearrewards.com
www.winwithradiate.com
transfertolimestone.com
www.gettoknowud.com
tmg.leehealthfoundation.org
www.mycaoffer.com
www.CbnCs-Marketing.com
www.aksteelinvestorday.com
www.mymetdental.com
*.guardretention.com
*.guardofficers.com
*.guardsfab.com
*.guardwarrant.com
*.guardrsp.com
affordmyfuture.com
exploreTFC.com
www.gettoknowpmi.com
www.FSGLoans.com
www.FSGLoan.com
TransferToCatawba.com
BelongAtCatawba.com
www.bellarmineaid.com
2beprepared.pointloma.edu
beprepared.pointloma.edu
www.swhpagentroadshow.com
HI.liveherelearnhereservehere.com
CA.liveherelearnhereservehere.com
IA.GuardFastTrack.com
info.wnegoldenbearclub.com
onwardto.owu.edu
onward2.owu.edu
www.diamondcustomersurvey.com
myAUstory.anderson.edu
mystory.anderson.edu
watchmego2.washjeff.edu
watchme.washjeff.edu
www.openyourmindnow.com
centered.dordt.edu
experience.dordt.edu
donate.newarka.edu
explore.centre.edu
www.theartofcampaigns.com
donate.chapin.edu
www.OnMyWayToNCAT.com
www.OnMyWay2NCAT.com
www.TransferMeToNCAT.com
cpcknights.com
www.bhgpayment.com
www.choosescc.com
connect.delbarton.org
www.yourpathtopossible.com
www.stpressevents.com
yourplace.piedmont.edu
urplace.piedmont.edu
donate.trinityschoolnyc.org
exploretfcdigital.com
uniquely.eureka.edu
mylife2.sdcc.edu
mylife.sdcc.edu
discover.enc.edu
www.myvaluekit.com
www.rittersoffer.com
www.give2greenville.com
real.dordt.edu
findpurpose.swu.edu
www.optinbobcatcce.com
www.kit-offer.com
csupurpose.com
*.bhgpatientlending.com
bethechange.indwes.edu
*.bhgprocard.com
www.My-acceptance.com
www.SupportFOD.com
www.sponsorsaints.com
judsondifference.com
experiencehope.hiu.edu
discoverhope.hiu.edu

Other certificates including the domain name mdl.io

(limited to 100 certificates)
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
studio.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
studio.dashboard.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io

Certificate

The complete raw certificate details for secure.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIYQjCCFyqgAwIBAgIQXt2Yl63iX1cAAAAAUPwdBzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
OTEyMTkyMzQ4MTZaFw0yMDA5MjIwMDE4MTNaMGExCzAJBgNVBAYTAlVTMRMwEQYD
VQQIEwpDYWxpZm9ybmlhMQ8wDQYDVQQHEwZJcnZpbmUxFDASBgNVBAoTC01pbmRm
aXJlaW5jMRYwFAYDVQQDEw1zZWN1cmUubWRsLmlvMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5TaEIIuxqEa/HN0ofFmq/lqtp3
3ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/tvS10KhAU2Ffzp1YWoxiFyRX
gbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/qZfsianbV02APBVR/Qfy+FTg
AGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgArqP/c3JJF17EWopm/EVdFvEB
v19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49BFm9FujTdykxdvr1q9zNH15NQ
CB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRdEQIDAQABo4IUmjCCFJYwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwghMXBgNVHREEghMOMIITCoINc2VjdXJlLm1kbC5p
b4IRbGV0c2dvLmxhc2VsbC5lZHWCFnd3dy5hbGJpb24tY29sbGVnZS5jb22CD3d3
dy5CSEdMb2FuLmNvbYIMYmUudGFib3IuZWR1ghB3d3cuQkhHY2FyZHMuY29tghB3
d3cuYmhnbG9hbnMuY29tghJ3d3cuQkhHUHJvTG9hbi5jb22CFHd3dy5iaGdwb3dl
cmNhcmQuY29tghJ3d3cuaWdpdmUyZXBpYy5jb22CDXN0dWRpby5tZGwuaW+CKndl
bGNvbWV0b3RoZWZhbWlseS1jdXN0b21lcmRpcmVjdC5tLm1kbC5pb4IgcGV0Y290
aGlua2Fkb3B0aW9uZmlyc3QubS5tZGwuaW+CEXN0dWRpby5hZncubWRsLmlvghdz
dHVkaW8uZGFzaGJvYXJkLm1kbC5pb4ITc3R1ZGlvLmFkbWluLm1kbC5pb4ISc3R1
ZGlvLnB1cmwubWRsLmlvghptaWNyb3NpdGUuY29udGFpbmVyLm1kbC5pb4IibWVt
YmVycy5jaGFtcGlvbnNoaXBjb21taXRtZW50LmNvbYISd3d3Lm15YmhnY2FyZHMu
Y29tghR3d3cubXljYXBpdGFsbm93LmNvbYIPdHJhY2tpbmcubWRsLmlvghN3d3cu
c3VwcG9ydGVjZnMub3JnghF3d3cuc3VwcG9ydGhtLm9yZ4IWYXBwbHltanVyLnN0
bWFyeXR4LmVkdYILKi5teS1kdi5jb22CC3lvdXIubHIuZWR1ght3d3cuZ3JvdXBs
ZWdhbHBsYW5vZmZlci5jb22CEXd3dy5pbnZlc3RkYnEuY29tghNyZXdhcmRzLmtl
d2FkaW4uY29tgh9pdHNwZXJzb25hbC5tYXJ0aW5tZXRob2Rpc3QuZWR1gg5iZS5o
ZW5kcml4LmVkdYIYd3d3Lm1ldHBkcG5ldHdvcmtkZXYuY29tghN3d3cuYmhnYW5k
YmFua3MuY29tgg53d3cubWV0cGRwLmNvbYIKZ2V0c3htLmNvbYIOd3d3LmdldHN4
bS5jb22CDm1vbml0b3IubWRsLmlvgg53ZXJob21lLm9jLmVkdYIXd3d3Lm1vYmx0
eWNhcnBldG9uZS5jb22CE2hpcHBvcy53aW4yd2lsZC5jb22CEHd3dy5naXZpbmdt
dS5jb22CF3d3dy53ZWxjb21ldG9oYXJ2ZXkuY29tgg8qLnNlY3VyZS5tZGwuaW+C
FHd3dy5lZHdhcmRzdXBkYXRlLmNhghJhcHBseS5rZXlzdG9uZS5lZHWCFHByb21p
c2Uua2V5c3RvbmUuZWR1ghNnZXRpbmZvLmNwcy5nd3UuZWR1ghZ3d3cubHZjc2No
b2xhcnNoaXAuY29tghhvcHRpbi5vbmVzdGFycmV3YXJkcy5jb22CE3d3dy5CSEdQ
ZXJzb25hbC5jb22CD2JlbG9uZ2F0LmJ3LmVkdYIXd3d3LmZpcmVzcHJpbmdwcm9t
by5jb22CD215bWNjYWxsaW5nLmNvbYIVRGlzY292ZXJMQUNvbGxlZ2UuY29tghVm
YXVsa25lcmxhd3NjaG9vbC5jb22CE2Rpc2NvdmVyU2hvcnRlci5jb22CDEJQQ2Zv
ck1lLmNvbYIQVHJhbnNmZXJ0b01DLmNvbYIRWW91ck1DY2FsbGluZy5jb22CEWJz
dHJvbmcud3RhbXUuZWR1ghNtb3Rpb250b3N1Y2NlZWQuY29tgg53d3cud3BjNGNj
LmNvbYIjd3d3LnN1cHBvcnRzYWNyZWRoZWFydGdyZWVud2ljaC5vcmeCD2dpdmUu
ZHdpZ2h0LmVkdYIjd3d3LmNvcm5odXNrZXJiYW5rcG93ZXJjaGVja2luZy5jb22C
D3d3dy5tZXRkaG1vLmNvbYIUZXhwZXJpZW5jZS5jb2tlci5lZHWCD2ltdXN0Z28u
bWh1LmVkdYIaZ28uYmVsbW9udGFiYmV5Y29sbGVnZS5lZHWCE3d3dy5mZGxjcmV3
YXJkcy5jb22CEnd3dy5hcmNmdWxmaWxsLmNvbYITKi5nZXRrYXNhc2FjYXNoLmNv
bYIXKi5nZXRrYXNhc2FjYXNoYmFjay5jb22CDHd3dy5jMW1tLmNvbYIbbG91aXNp
YW5hY29sbGVnZWRpZ2l0YWwuY29tghNzaG9ydGVydWRpZ2l0YWwuY29tghBvbmVs
aW1lc3RvbmUuY29tghJ3d3cuZXhwbG9yZWhwdS5jb22CFXd3dy5leHBsb3JlYnJl
bmF1LmNvbYISd3d3LmV4cGxvcmV3d2MuY29tghp3d3cuZXhwbG9yZXdlc3RtaW5z
dGVyLmNvbYISd3d3LnlvdXJsb3lvbGEuY29tghB3d3cuZ29odXNzb24uY29tghV3
d3cuZXhwbG9yZWxlc2xleS5jb22CEnd3dy5leHBsb3JlbHZjLmNvbYITd3d3LmRp
c2NvdmVyYWljLmNvbYIYd3d3LnlvdWJlbG9uZ2F0d2VsbHMuY29tghF3d3cuZ29u
ZXdtYW51LmNvbYIZd3d3LmV4cGxvcmVuZXdjb2xsZWdlLmNvbYIVd3d3LnRoaW5r
bWVyZWRpdGguY29tghRjb25uZWN0LmxpbmZpZWxkLmVkdYIed3d3LmNoYW1waW9u
c2hpcGNvbW1pdG1lbnQuY29tghQqLmdldGthc2FzYWxvYW5zLmNvbYITbGlmZWNh
bGwudHJ1ZXR0LmVkdYIVb3Bwb3J0dW5pdHkuc2hhd3UuZWR1ggx3ZWFyZS5zdS5l
ZHWCFXd3dy5wb3dlcmNoZWNraW5nLm5ldIIVYXBwLmJlYWNvbmNvbGxlZ2UuZWR1
ghF3d3cubWJ1Z2lmdGVkLm9yZ4IaZGVzaWduZXJzLmxhc2VyaW1hZ2VuYy5jb22C
E2Rpc2NvdmVyLmRhZW1lbi5lZHWCGXd3dy5oYXJyeWNoYXBpbnN1cnZleS5vcmeC
EG15LmxhbmVwcmVzcy5jb22CFnd3dy5GcmVzaHN0YXJ0ZmFzdC5jb22CFnd3dy5j
bGFya2hpZ2hlcmVkLmluZm+CFnd3dy5OZWVkZnJlc2hzdGFydC5jb22CFXd3dy5l
eHBsb3JlYWxiaW9uLmNvbYIVd3d3LmRpc2NvdmVydWluZHkuY29tghV3d3cuZ29m
bG9yaWRhcG9seS5jb22CFHd3dy5kaXNjb3ZlcnNtY20uY29tghR3d3cuZGlzY292
ZXJ3aXR0LmNvbYIZd3d3LmV4cGxvcmViZWxsYXJtaW5lLmNvbYIVd3d3LmRpc2Nv
dmVydmFscG8uY29tghh3d3cubXllbG1zZXhwZXJpZW5jZS5jb22CFXd3dy5leHBs
b3JlZGVwYXV3LmNvbYIUd3d3LmNob29zZWdhbm5vbi5jb22CGXd3dy5tYW5jaGVz
dGVyYnNjaG9vbC5jb22CFnd3dy5hdWdyYWRwcm9ncmFtcy5jb22CFXd3dy5oYXJ2
YXJkZXh0bm93LmNvbYIUd3d3LnB0a2F0aGFydmFyZC5jb22CF3d3dy5zdW1tZXJh
dGhhcnZhcmQuY29tghBmb3Jtcy5taWNyb2YuY29tghdvbmxpbmUub25lbGltZXN0
b25lLmNvbYIOcmVhZHkueHVsYS5lZHWCEnd3dy5uZXdyZXpyZWZpLmNvbYITbGlt
ZXN0b25lLmVkdWNhdGlvboIVd3d3LnN1cHBvcnRicm9va2Uub3Jnghh3d3cuYXZp
Y2FzaW5vcmV3YXJkcy5jb22CF3d3dy5jYXNpbm9va3Jld2FyZHMuY29tgiN3d3cu
Y29tbWVyY2lhbG1haW50ZW5hbmNlcHJvZ3JhbS5jYYIYd3d3LmdvbGRyaXZlcnJl
d2FyZHMuY29tghd3d3cuZ2l2aW5nYmFja2NhbmVzLmNvbYIWKi5zaGFyZWthc2Fz
YWxvYW5zLmNvbYIbZ2l2ZWF3YXlzLnRodW1iY2VsbHVsYXIuY29tghl3d3cuYWNj
ZXNzbXljYXJkb2ZmZXIuY29tghl3d3cubGltZXN0b25lLWRpZ2l0YWwuY29tght3
d3cuZmF1YWx1bW5pbWVtYmVyc2hpcC5jb22CE3d3dy5hZmdhcmNoaXZlcy5jb22C
D0lkZW50aXR5Lm1kbC5pb4ILRWRnZS5tZGwuaW+CDUNsaWVudC5tZGwuaW+CE3d3
dy5idWlsZGluZ2Jjcy5jb22CGHd3dy5ibGFja2JlYXJyZXdhcmRzLmNvbYIWd3d3
LndpbndpdGhyYWRpYXRlLmNvbYIXdHJhbnNmZXJ0b2xpbWVzdG9uZS5jb22CE3d3
dy5nZXR0b2tub3d1ZC5jb22CG3RtZy5sZWVoZWFsdGhmb3VuZGF0aW9uLm9yZ4IR
d3d3Lm15Y2FvZmZlci5jb22CF3d3dy5DYm5Dcy1NYXJrZXRpbmcuY29tghp3d3cu
YWtzdGVlbGludmVzdG9yZGF5LmNvbYITd3d3Lm15bWV0ZGVudGFsLmNvbYIUKi5n
dWFyZHJldGVudGlvbi5jb22CEyouZ3VhcmRvZmZpY2Vycy5jb22CDyouZ3VhcmRz
ZmFiLmNvbYISKi5ndWFyZHdhcnJhbnQuY29tgg4qLmd1YXJkcnNwLmNvbYISYWZm
b3JkbXlmdXR1cmUuY29tgg5leHBsb3JlVEZDLmNvbYIUd3d3LmdldHRva25vd3Bt
aS5jb22CEHd3dy5GU0dMb2Fucy5jb22CD3d3dy5GU0dMb2FuLmNvbYIVVHJhbnNm
ZXJUb0NhdGF3YmEuY29tghNCZWxvbmdBdENhdGF3YmEuY29tghV3d3cuYmVsbGFy
bWluZWFpZC5jb22CGTJiZXByZXBhcmVkLnBvaW50bG9tYS5lZHWCGGJlcHJlcGFy
ZWQucG9pbnRsb21hLmVkdYIZd3d3LnN3aHBhZ2VudHJvYWRzaG93LmNvbYIhSEku
bGl2ZWhlcmVsZWFybmhlcmVzZXJ2ZWhlcmUuY29tgiFDQS5saXZlaGVyZWxlYXJu
aGVyZXNlcnZlaGVyZS5jb22CFUlBLkd1YXJkRmFzdFRyYWNrLmNvbYIaaW5mby53
bmVnb2xkZW5iZWFyY2x1Yi5jb22CEG9ud2FyZHRvLm93dS5lZHWCD29ud2FyZDIu
b3d1LmVkdYIdd3d3LmRpYW1vbmRjdXN0b21lcnN1cnZleS5jb22CFm15QVVzdG9y
eS5hbmRlcnNvbi5lZHWCFG15c3RvcnkuYW5kZXJzb24uZWR1ghd3YXRjaG1lZ28y
Lndhc2hqZWZmLmVkdYIUd2F0Y2htZS53YXNoamVmZi5lZHWCF3d3dy5vcGVueW91
cm1pbmRub3cuY29tghJjZW50ZXJlZC5kb3JkdC5lZHWCFGV4cGVyaWVuY2UuZG9y
ZHQuZWR1ghJkb25hdGUubmV3YXJrYS5lZHWCEmV4cGxvcmUuY2VudHJlLmVkdYIZ
d3d3LnRoZWFydG9mY2FtcGFpZ25zLmNvbYIRZG9uYXRlLmNoYXBpbi5lZHWCFXd3
dy5Pbk15V2F5VG9OQ0FULmNvbYIUd3d3Lk9uTXlXYXkyTkNBVC5jb22CGHd3dy5U
cmFuc2Zlck1lVG9OQ0FULmNvbYIOY3Bja25pZ2h0cy5jb22CEnd3dy5iaGdwYXlt
ZW50LmNvbYIRd3d3LmNob29zZXNjYy5jb22CFWNvbm5lY3QuZGVsYmFydG9uLm9y
Z4Iad3d3LnlvdXJwYXRodG9wb3NzaWJsZS5jb22CFXd3dy5zdHByZXNzZXZlbnRz
LmNvbYIWeW91cnBsYWNlLnBpZWRtb250LmVkdYIUdXJwbGFjZS5waWVkbW9udC5l
ZHWCG2RvbmF0ZS50cmluaXR5c2Nob29sbnljLm9yZ4IVZXhwbG9yZXRmY2RpZ2l0
YWwuY29tghN1bmlxdWVseS5ldXJla2EuZWR1ghBteWxpZmUyLnNkY2MuZWR1gg9t
eWxpZmUuc2RjYy5lZHWCEGRpc2NvdmVyLmVuYy5lZHWCEnd3dy5teXZhbHVla2l0
LmNvbYIUd3d3LnJpdHRlcnNvZmZlci5jb22CF3d3dy5naXZlMmdyZWVudmlsbGUu
Y29tgg5yZWFsLmRvcmR0LmVkdYITZmluZHB1cnBvc2Uuc3d1LmVkdYIWd3d3Lm9w
dGluYm9iY2F0Y2NlLmNvbYIRd3d3LmtpdC1vZmZlci5jb22CDmNzdXB1cnBvc2Uu
Y29tghcqLmJoZ3BhdGllbnRsZW5kaW5nLmNvbYIWYmV0aGVjaGFuZ2UuaW5kd2Vz
LmVkdYIQKi5iaGdwcm9jYXJkLmNvbYIVd3d3Lk15LWFjY2VwdGFuY2UuY29tghJ3
d3cuU3VwcG9ydEZPRC5jb22CFXd3dy5zcG9uc29yc2FpbnRzLmNvbYIUanVkc29u
ZGlmZmVyZW5jZS5jb22CFmV4cGVyaWVuY2Vob3BlLmhpdS5lZHWCFGRpc2NvdmVy
aG9wZS5oaXUuZWR1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0
Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggr
BgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgG
CCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5u
ZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWlu
MjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4E
FgQUmhMU25mYC8pyxbTSUG5lsKjzSVIwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsF
AAOCAQEAvi4nUlzD221l++Lm6y7limZbJVPJHw9n/8oLUi2lJV2RDCR8ZHH2CB5U
XlEsWjmhoWvL+afLShWIqXXppmNFigD5WltHvvnW4dXr7fHQKUtLKv7SVS1IxCie
VtjYGSWRKucvDs/6dZHeZYEToR/gACl/ZDQLyDZS8LRMwCeMFMKGteGBHCTaEumR
+4rhOrxTLhPWtkIQpkL/z8etQW89Ls158oateeKOqsGqFzc4U/TPaUiTJLqLGSuX
3GgaPcxhcWo0WqUk/Rrq0ZPq4fRneQrYPNSspCPiDYCe1tas0zjXl5/MYdMjRJ2j
Uhl9LMI2l9sQVYPzIA1ozPcWgrmNZg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5T
aEIIuxqEa/HN0ofFmq/lqtp33ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/
tvS10KhAU2Ffzp1YWoxiFyRXgbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/
qZfsianbV02APBVR/Qfy+FTgAGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgA
rqP/c3JJF17EWopm/EVdFvEBv19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49B
Fm9FujTdykxdvr1q9zNH15NQCB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126098024153045157830690730075697716487
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 23:48:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 00:18:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mindfireinc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951563452781109146057106392320226867107000374229101798015474952460603726911991854852083812187781988271179003750789017090612383066931286354568744127269341469194633587084064186594382380309598888000395093878687446126016630170284238938965547827285598923799327864755580089993702511150115546208965454260860994738074217442916082208995375929856279017354403501537507855236546290516823457160534480645279233472204278201703889873993923035009212008348742274919543512527007662929090692110470340849541123982874948530651309660094007907158238537985025279028193304796415915389367590604571312619101468167282531565955541987601938668817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgo.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-college.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tabor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGProLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothefamily-customerdirect.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcothinkadoptionfirst.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybhgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycapitalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportecfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supporthm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applymjur.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-dv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.lr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grouplegalplanoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investdbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.kewadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspersonal.martinmethodist.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hendrix.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdpnetworkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werhome.oc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobltycarpetone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometoharvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwardsupdate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promise.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinfo.cps.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin.onestarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGPersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belongat.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firespringpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymccalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DiscoverLACollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulknerlawschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverShorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BPCforMe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransfertoMC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'YourMCcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bstrong.wtamu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiontosucceed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpc4cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsacredheartgreenwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dwight.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornhuskerbankpowerchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metdhmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imustgo.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.belmontabbeycollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcfulfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacashback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianacollegedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorterudigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorehpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebrenau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewestminster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourloyola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gohusson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveraic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youbelongatwells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonewmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorenewcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.linfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifecall.truett.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.shawu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weare.su.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerchecking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.beaconcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbugifted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designers.laserimagenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.daemen.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrychapinsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lanepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Freshstartfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarkhighered.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Needfreshstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorealbion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveruindy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gofloridapoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoversmcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoverwitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebellarmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovervalpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myelmsexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exploredepauw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosegannon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchesterbschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augradprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvardextnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptkatharvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summeratharvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.microf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ready.xula.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrezrefi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limestone.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportbrooke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avicasinorewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinookrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialmaintenanceprogram.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldriverrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingbackcanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharekasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveaways.thumbcellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessmycardoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limestone-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faualumnimembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afgarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Identity.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Edge.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Client.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildingbcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackbearrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winwithradiate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfertolimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettoknowud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmg.leehealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycaoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.CbnCs-Marketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aksteelinvestorday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymetdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardretention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardofficers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardsfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardwarrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardrsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordmyfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploreTFC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettoknowpmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.FSGLoans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.FSGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransferToCatawba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BelongAtCatawba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellarmineaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2beprepared.pointloma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beprepared.pointloma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swhpagentroadshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HI.liveherelearnhereservehere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CA.liveherelearnhereservehere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'IA.GuardFastTrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.wnegoldenbearclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwardto.owu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onward2.owu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondcustomersurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myAUstory.anderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystory.anderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchmego2.washjeff.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchme.washjeff.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openyourmindnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centered.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.newarka.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartofcampaigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.chapin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.OnMyWayToNCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.OnMyWay2NCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TransferMeToNCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosescc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.delbarton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourpathtopossible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpressevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourplace.piedmont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urplace.piedmont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.trinityschoolnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploretfcdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniquely.eureka.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylife2.sdcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylife.sdcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.enc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvaluekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rittersoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.give2greenville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'real.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findpurpose.swu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optinbobcatcce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kit-offer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csupurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhgpatientlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethechange.indwes.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhgprocard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.My-acceptance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.SupportFOD.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sponsorsaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judsondifference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiencehope.hiu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverhope.hiu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1314db99980bca72c5b4d2506e65b0a8f34952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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