reportsaver.experian.co.uk

- Experian PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 75:ab:d6:f2:14:a2:b3:fa:00:00:00:00:54:cd:7f:c6 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Experian PLC

Company registration number: 93905
Organization: Experian PLC
State / Province: California
Locality: Costa Mesa
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:ab:d6:f2:14:a2:b3:fa:00:00:00:00:54:cd:7f:c6
Serial Number (int): 156411917884901518658155486670610071494
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c4:b2:89:1a:24:76:e0:45:12:f0:22:9e:12:ea:3a:f9:2f:96:d9:99
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 6d:40:cf:97:32:76:17:e5:e9:34:bc:b6:e5:bc:cd:ea:0b:90:a5:48
Fingerprint (sha256): 22:dc:ee:19:90:ca:0b:ea:b9:b7:40:1f:67:70:cc:23:a2:f4:bd:b1:31:56:04:2e:5d:c9:55:88:03:b0:6b:f4

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate reportsaver.experian.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reportsaver.experian.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reportsaver.experian.co.uk

Other certificates including the domain name experian.co.uk

(limited to 100 certificates)
ceres-workbench.experian.co.uk
view.eml.experian.co.uk
identityprotect.experian.co.uk
emsuweb2.experian.co.uk
incapsula.com
imperva.com
morrisonslp.experian.co.uk
account.experian.co.uk
qa-content.experian.co.uk
chaldene-analytics.experian.co.uk
us-mail.experian.com
regulation.experian.co.uk
saturnworkbench.experian.co.uk
click.eml.experian.co.uk
praxidike-notebook.experian.co.uk
data.experian.co.uk
uatworkbench.experian.co.uk
AffordabilityCheck.experian.co.uk
emsweb.experian.co.uk
digiwise.experian.co.uk
alkanic.com
stage.identityprotect.experian.co.uk
analytics1.experian.co.uk
api.experian.co.uk
ganymede-analytics.experian.co.uk
imperva.com
tags.experian.co.uk
creditreport.cpp.experian.co.uk
praxidike-analytics.experian.co.uk
home.experian.co.uk
tmp.creditmatcher.experian.co.uk
lysithea-notebook.experian.co.uk
dqc.dev.experian.co.uk
analytics-explorer.experian.co.uk
creditreport.cpp.experian.co.uk
retirementplansecure.experian.co.uk
eukrante-notebook.experian.co.uk
forgerock.experian.co.uk
dev.garlik.api.experian.co.uk
www.protectmyidentity.experian.co.uk
consumer.learn.experian.co.uk
www.fulfillment.experian.co.uk
retirementplansecure.experian.co.uk
ganymede-analytics.experian.co.uk
5707324073181184-fe2.pantheonsite.io
tmp.ins.experian.co.uk
5707324073181184-fe2.pantheonsite.io
mbnaidcs.experian.co.uk
trinculo-notebook.experian.co.uk
imperva.com
5707324073181184-fe2.pantheonsite.io
5707324073181184-fe2.pantheonsite.io
www.c1.experian.co.uk
stg.pcod.experian.co.uk
fulfilldataaccess.experian.co.uk
car.experian.co.uk
admin.stg.pcod.experian.co.uk
stg-fedsso.experian.co.uk
us-mail.experian.com
admin.pcod.experian.co.uk
us-mail.experian.com
kranto-notebook.experian.co.uk
www.uk.experian.com
francisco-notebook.experian.co.uk
fulfillcredit.experian.co.uk
report.experian.co.uk
garlik.api.experian.co.uk
creditmatcher.experian.co.uk
userdetails.creditreport.cpp.experian.co.uk
stg.pmidvalidation.experian.co.uk
desdemona-analytics.experian.co.uk
queries.creditreport.cpp.experian.co.uk
stg-fedsso.experian.co.uk
neartime.experian.co.uk
home.experian.co.uk
bidatavis.experian.co.uk
Jeeves.poc.experian.co.uk
www.uk.experian.com
creditreport.cpp.experian.co.uk
home.experian.co.uk
fulfilldataaccess.experian.co.uk
qa.garlik.api.experian.co.uk
retirementplan.experian.co.uk
creditreport.cpp.experian.co.uk
goad.experian.co.uk
menippe-analytics.experian.co.uk
prodmove.experian.co.uk
agentux.dsardatacapture.experian.co.uk
setebos-analytics.experian.co.uk
www.protectmyidentity.experian.co.uk
emsuweb.experian.co.uk
engage.experian.co.uk
pmidvalidation.experian.co.uk
euporie-notebook.experian.co.uk
stephano-notebook.experian.co.uk
klymene-notebook.experian.co.uk
5707324073181184-fe2.pantheonsite.io
reportsaver.experian.co.uk
xma.experian.co.uk
consumer.help.experian.co.uk

Certificate

The complete raw certificate details for reportsaver.experian.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIQdavW8hSis/oAAAAAVM1/xjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDE0IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0x
NzA2MjkwOTEwMDdaFw0xODA2MjkwOTQwMDZaMIG3MQswCQYDVQQGEwJVUzETMBEG
A1UECBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKQ29zdGEgTWVzYTETMBEGCysGAQQB
gjc8AgEDEwJKRTEVMBMGA1UEChMMRXhwZXJpYW4gUExDMR0wGwYDVQQPExRQcml2
YXRlIE9yZ2FuaXphdGlvbjEOMAwGA1UEBRMFOTM5MDUxIzAhBgNVBAMTGnJlcG9y
dHNhdmVyLmV4cGVyaWFuLmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApgZpJktNe6zinoSpaiBoV/RDtkOh+cOEWIA8EnNuIU52njDb/aAvKUhc
oGmXd2ITdsuUN1WYNTecbovnuFdDdOqHt0fBKd00xUIXmuDUDNe0o4wmEbPjcq9l
fmsBISokJ9TLlY2HAmlXgs5WEA3zmsW136o/TgRnxCPodPJIP05UgK2ebzs9MX4D
ZT6Hf17WSUdLtAgh8dXB+6KSSjB7w8qG+/0K3HLGvTsvOHU6WVKgkrpHQxu5OKNV
sybh2RK8UVZ8cwomlxP7atWzmEdmma8cyM1W8HGoFW0Njn0nHXs75Boe8AiZlOhI
Hj/XlgVc4OW9KSJghoU8kyur333PlQIDAQABo4IBpTCCAaEwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwJQYDVR0RBB4wHIIacmVwb3J0c2F2ZXIuZXhwZXJpYW4uY28udWsw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBo
BggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3Qu
bmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxbS1jaGFp
bjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5l
dC9sZXZlbDFtLmNybDBKBgNVHSAEQzBBMDYGCmCGSAGG+mwKAQIwKDAmBggrBgEF
BQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwBwYFZ4EMAQEwHwYDVR0j
BBgwFoAUw/fQtSowra8NkSFwOVTdvIlwxzowHQYDVR0OBBYEFMSyiRokduBFEvAi
nhLqOvkvltmZMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAJajvbZ/qTi3
mhdvlVXnwpJ6K6/qg724/XdNk5J8XlO/KUJqoI4nlRGClCq5kMYZkFxcMzU55r1k
Qdepl/eI5mgKsZld0RHiHVqlWDB9013ggZhNpg6RifblSxCXOGdAuu1GSb1uajTA
1b6GErKFMinPNn6M0EJbZlLdNlwxxZQ5VnMjPjOMqFZkiU4nEh0ZLP5db1h9KaVM
t4EuDlP7ac0R47hkgbKDyAkjpsA3ItTEQmwTqUJXHX/ArJBu+04BhJEQuLan8HD7
+B/ZMKB6qNudvZ5TvHS+tkmznYeWQcYf0u+NQ6Nu+W7mE5W3KIVBBXFUqKcpj2Br
zVt45KpG04w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgZpJktNe6zinoSpaiBo
V/RDtkOh+cOEWIA8EnNuIU52njDb/aAvKUhcoGmXd2ITdsuUN1WYNTecbovnuFdD
dOqHt0fBKd00xUIXmuDUDNe0o4wmEbPjcq9lfmsBISokJ9TLlY2HAmlXgs5WEA3z
msW136o/TgRnxCPodPJIP05UgK2ebzs9MX4DZT6Hf17WSUdLtAgh8dXB+6KSSjB7
w8qG+/0K3HLGvTsvOHU6WVKgkrpHQxu5OKNVsybh2RK8UVZ8cwomlxP7atWzmEdm
ma8cyM1W8HGoFW0Njn0nHXs75Boe8AiZlOhIHj/XlgVc4OW9KSJghoU8kyur333P
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156411917884901518658155486670610071494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-29 09:10:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 09:40:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Costa Mesa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '93905'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reportsaver.experian.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20958719878363518523291074862310402214423315791554172210339637102276913547300276732063939458864622857646233294806871308363635667899086885403798303331221831778618569212974418068120332319789626400244943855077785274330478663303811411816862252684431430257271248681468597311860757697599259398137096676778153422516959654070789399247584726102925314333604371728947968821591869139403826024174816836549049320804504847003353192765082755574411601662699654742573963808216088720665441077818603455794801706019300092800458730302151282339867783447196736762470463074821001491517480965717112307446320931055655402109658684694450744971157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportsaver.experian.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4b2891a2476e04512f0229e12ea3af92f96d999
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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