fbchat.asb.co.nz

- ASB Bank Limited -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number b2:25:6f:56:6e:c4:b3:59:00:00:00:00:54:d0:3e:e9 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ASB Bank Limited

Company registration number: 398445
Organization: ASB Bank Limited
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b2:25:6f:56:6e:c4:b3:59:00:00:00:00:54:d0:3e:e9
Serial Number (int): 236796956428849943047636457389789560553
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3a:48:3a:c8:a3:13:ca:e6:7f:93:3e:bd:d5:f7:7d:d7:d0:9c:8c:bf
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 37:4e:ec:91:dd:ff:21:20:c4:6c:98:2d:72:f4:0e:42:f4:64:cb:ca
Fingerprint (sha256): 24:91:2f:ee:62:dc:a0:74:ed:3b:09:f6:3e:9c:f3:d7:c0:61:e5:b9:4e:7b:22:fd:f8:5f:97:04:1d:9b:94:71

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate fbchat.asb.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fbchat.asb.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fbchat.asb.co.nz

Other certificates including the domain name asb.co.nz

(limited to 100 certificates)
fbchat.asb.co.nz
receivables-suite.asb.co.nz
blog.asb.co.nz
qa.asb.co.nz
online.asb.co.nz
reports.asb.co.nz
ra.asb.co.nz
mobileapifnb.asb.co.nz
visaissuer.testservices.asb.co.nz
video.asb.co.nz
st.asb.co.nz
m.asb.co.nz
tr.asb.co.nz
fbchat.asb.co.nz
feedback.asb.co.nz
srapp.asb.co.nz
developer.asb.co.nz
api-pnz-partner.asb.co.nz
qa.asbsecurities.co.nz
careers4u.asb.co.nz
renovate.asb.co.nz
api.asb.co.nz
mobileapifnb.asb.co.nz
onboardingapi.asb.co.nz
sra.asb.co.nz
srx.asb.co.nz
links.mail.asb.co.nz
www.asb.co.nz
cardmanager.asb.co.nz
online.asb.co.nz
api.asb.co.nz
probe.asb.co.nz
renovate.asb.co.nz
succeedon.asb.co.nz
banner.asb.co.nz
reports.asb.co.nz
www.suburbseeker.asb.co.nz
sra.asb.co.nz
info.asb.co.nz
www.asb.co.nz
cards.asb.co.nz
datastreamclientlogs.asb.co.nz
feedback.asb.co.nz
www.suburbseeker.asb.co.nz
video.asb.co.nz
market-alerts.asb.co.nz
m.asb.co.nz
voiceofthecustomer.asb.co.nz
www.suburbseeker.asb.co.nz
onboardingapiqa.asb.co.nz
api-pnz-poc.asb.co.nz
receivables-suite.asb.co.nz
qadeveloper.asb.co.nz
video.asb.co.nz
visit.asb.co.nz
sra.asb.co.nz
gauntlet.asb.co.nz
developer.asb.co.nz
testservices.asb.co.nz
asb.co.nz
fnb.asb.co.nz
www.asb.co.nz
srapp.asb.co.nz
fbchat.asb.co.nz
gauntlet.asb.co.nz
vpnd.asb.co.nz
asb.co.nz
banner.asb.co.nz
media.asb.co.nz
online.asb.co.nz
ra.asb.co.nz
api.asb.co.nz
api.asb.co.nz
gauntlet.asb.co.nz
PXATCA15.prod.asbgroup.co.nz
ra.asb.co.nz
info.asb.co.nz
mail.asbdev.co.nz
gauntlet.asb.co.nz
snapshot.asb.co.nz
fnb.asb.co.nz
testservices.asb.co.nz
testservices.asb.co.nz
www.asb.co.nz
content.asb.co.nz
3desdecsign.dev.asb.co.nz
gauntlet.asb.co.nz
api.asb.co.nz
pages.asb.co.nz
cardmanager.asb.co.nz
content.asb.co.nz
ventures.asb.co.nz
developer.asb.co.nz
qa.asb.co.nz
paymark.asb.co.nz
devservices.asb.co.nz
datastreamclientlogs.asb.co.nz
thirdparty.asb.co.nz
vdi.asb.co.nz
mobileapiqa.asb.co.nz

Certificate

The complete raw certificate details for fbchat.asb.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHYzCCBkugAwIBAgIRALIlb1ZuxLNZAAAAAFTQPukwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxNCBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMU0wHhcN
MTkwOTA5MjIwNjQ4WhcNMjExMDMwMjIzNjQ3WjCBmzELMAkGA1UEBhMCTloxETAP
BgNVBAcTCEF1Y2tsYW5kMRMwEQYLKwYBBAGCNzwCAQMTAk5aMRkwFwYDVQQKExBB
U0IgQmFuayBMaW1pdGVkMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjEP
MA0GA1UEBRMGMzk4NDQ1MRkwFwYDVQQDExBmYmNoYXQuYXNiLmNvLm56MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zWw1EXr7wf1/Df7TW5lKfTl2HzG
BShTe7sJ998PD62Jt/kJmG3l6+3CiEQUnOl5iJt3L+vlEMpTl1DL/2weiQbMoxF+
yCyaUav7ZwFJRRj2/6OEwpuje6FUxI2tT1SyrvCqpTw1QW+ElfdfplYEolE1fGVQ
m2GpHqlju8xBW1XmUq2eV/60R3YIG5OeL3IVQP+wObBmVOLZUmDnHZR0ZCvcrSSJ
Wah7d9xuFyGSUnqTejq8bavVULBJEUqmz+E7VbWRFrQ7pNEEAGwH6OSu3NR4lorJ
Z7QgN8c/IK26C/i/w8HHT2Yg1XssjSMHp6KyXhbfO2RW4Cnr1elQTATPRwIDAQAB
o4IDfzCCA3swGwYDVR0RBBQwEoIQZmJjaGF0LmFzYi5jby5uejCCAfUGCisGAQQB
1nkCBAIEggHlBIIB4QHfAHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g
gw8AAAFtGCwnOQAABAMARjBEAiAeOXj2/aqH4rJtPcU6fefqVT2XI0kjkRWKli4G
sr6JXwIgCjHvZCyyGSZzoWj6bzk2PLz667++J6ukZLwqh6ppeVEAdgBVgdTCFpA2
AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAW0YLCdcAAAEAwBHMEUCIG5h0Ly+
106ovkaDVNy2Eo3y3RvLGf+4AvxMEfXQkYu9AiEA9I/mOA1pXJONEiwBX4/wdL5W
tBswDvGH6eF0UKfsbqUAdgBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaB
qAAAAW0YLCc7AAAEAwBHMEUCIQDoSdfWInh+YEFLvfPKTNr7iXeDtiL4leA44Cyc
Fb6YmwIgQ2S7BlsLv5M6EOVfVW+odsMWO2CPaaf3pYlcpd4eLc0AdgC72d+8H4px
tZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAW0YLCd7AAAEAwBHMEUCIQD/wyDy
USCRKjYPsZ4VspSfoPdcEs3L1AEJZ1E0YSYo9AIge0np/4J56OUTY2Qi1vnZFdrT
laX8p0N0V3d8gRLVj/QwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6
Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1
c3QubmV0L2wxbS1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDov
L2NybC5lbnRydXN0Lm5ldC9sZXZlbDFtLmNybDBKBgNVHSAEQzBBMDYGCmCGSAGG
+mwKAQIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEw
BwYFZ4EMAQEwHwYDVR0jBBgwFoAUw/fQtSowra8NkSFwOVTdvIlwxzowHQYDVR0O
BBYEFDpIOsijE8rmf5M+vdX3fdfQnIy/MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL
BQADggEBAJwjY307IQ6Ky0l8+A24dFkUojWL40sv1sgVLxruL+dXUjdT7Id4xMPd
0TxySKQ/NLpK1bG5rjobMSyv5RNnxHaohNvUjorT7rkD/TpQiDjFKH3o78ie6Vrt
JmEbUQaMNnCDBDUBnIGvt2ZKdIr2Psn/EeKRfMhLBi+z2a5J9MO/CFQ35oX6pgEK
gjHhdEU5LjF5Fk5H3GkUiXYbjb+K+QS5KcYnFQlZ8QqvzusYz10lawxycmDhyxuD
glh744A6svfwSBQ0SO6bU5Yusv6wEDjR95EQCPcPoSC/2xlEVbMZUCVNp5O6e2s1
7quhYJgsUm9SJITM7mVDd23XPLumrd8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zWw1EXr7wf1/Df7TW5l
KfTl2HzGBShTe7sJ998PD62Jt/kJmG3l6+3CiEQUnOl5iJt3L+vlEMpTl1DL/2we
iQbMoxF+yCyaUav7ZwFJRRj2/6OEwpuje6FUxI2tT1SyrvCqpTw1QW+ElfdfplYE
olE1fGVQm2GpHqlju8xBW1XmUq2eV/60R3YIG5OeL3IVQP+wObBmVOLZUmDnHZR0
ZCvcrSSJWah7d9xuFyGSUnqTejq8bavVULBJEUqmz+E7VbWRFrQ7pNEEAGwH6OSu
3NR4lorJZ7QgN8c/IK26C/i/w8HHT2Yg1XssjSMHp6KyXhbfO2RW4Cnr1elQTATP
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 236796956428849943047636457389789560553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 22:06:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-30 22:36:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASB Bank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '398445'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fbchat.asb.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27167711457888698146210760748004764658363334549369183984321833240749164762131978195983652184858460663023844287015018194289146468136098564862634563066191869071001569136165476205564838280374320885784761041250632148066310252469644442017788163639856858344285037211146212692560004909651616548478265447251623675087591668140655816962035298827093681153848989804303185639070113947627104693956162771019232879707739985322547217992597401591707759159488743123345002118649536788122366736232724199130840231092179550594059002098177327702725426337556034675483976684121233606316324375892389639660104719364670285191774571188485286580039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbchat.asb.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d182c2739000004030046304402201e3978f6fdaa87e2b26d3dc53a7de7ea553d9723492391158a962e06b2be895f02200a31ef642cb2192673a168fa6f39363cbcfaebbfbe27aba464bc2a87aa6979510076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016d182c275c000004030047304502206e61d0bcbed74ea8be468354dcb6128df2dd1bcb19ffb802fc4c11f5d0918bbd022100f48fe6380d695c938d122c015f8ff074be56b41b300ef187e9e17450a7ec6ea50076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016d182c273b0000040300473045022100e849d7d622787e60414bbdf3ca4cdafb897783b622f895e038e02c9c15be989b02204364bb065b0bbf933a10e55f556fa876c3163b608f69a7f7a5895ca5de1e2dcd007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d182c277b0000040300473045022100ffc320f25120912a360fb19e15b2949fa0f75c12cdcbd40109675134612628f402207b49e9ff8279e8e513636422d6f9d915dad395a5fca7437457777c8112d58ff4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a483ac8a313cae67f933ebdd5f77dd7d09c8cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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