wwwegenciacom.int-maui.sb.karmalab.net

- Expedia, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 37:4d:85:98:77:a5:20:f1:b3:57:ca:fd:6b:62:e1:9f was issued on by Entrust, Inc..

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Expedia, Inc

Organization: Expedia, Inc
State / Province: Washington
Locality: Bellevue
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:4d:85:98:77:a5:20:f1:b3:57:ca:fd:6b:62:e1:9f
Serial Number (int): 73510056266463887080744207166134739359
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 7c:8f:9a:40:5c:5c:f4:10:18:94:f5:2d:a7:18:42:8b:c0:cb:1f:d9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): aa:e0:2f:8b:9e:6e:64:69:f5:12:79:79:72:f4:0a:09:e6:16:2f:5d
Fingerprint (sha256): 26:f6:b0:06:28:54:00:af:fb:4e:48:c3:46:a5:ee:ed:03:0a:99:60:2d:4c:8b:b3:43:ec:6d:66:7d:59:16:3f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate wwwegenciacom.int-maui.sb.karmalab.net

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwwegenciacom.int-maui.sb.karmalab.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwwegenciacom.int-maui.sb.karmalab.net
*.int-maui.sb.karmalab.net
assets.egencia.com
int-maui.sb.karmalab.net
partnertest.egencia.com
wwwegenciamaui.egencia.ae
wwwegenciamaui.egencia.be
wwwegenciamaui.egencia.ca
wwwegenciamaui.egencia.ch
wwwegenciamaui.egencia.cn
wwwegenciamaui.egencia.co.il
wwwegenciamaui.egencia.co.in
wwwegenciamaui.egencia.co.nz
wwwegenciamaui.egencia.co.uk
wwwegenciamaui.egencia.co.za
wwwegenciamaui.egencia.com
wwwegenciamaui.egencia.com.au
wwwegenciamaui.egencia.com.br
wwwegenciamaui.egencia.com.hk
wwwegenciamaui.egencia.com.ph
wwwegenciamaui.egencia.com.sg
wwwegenciamaui.egencia.com.tr
wwwegenciamaui.egencia.cz
wwwegenciamaui.egencia.de
wwwegenciamaui.egencia.dk
wwwegenciamaui.egencia.es
wwwegenciamaui.egencia.eu
wwwegenciamaui.egencia.fi
wwwegenciamaui.egencia.fr
wwwegenciamaui.egencia.ie
wwwegenciamaui.egencia.it
wwwegenciamaui.egencia.mx
wwwegenciamaui.egencia.nl
wwwegenciamaui.egencia.no
wwwegenciamaui.egencia.pl
wwwegenciamaui.egencia.se

Other certificates including the domain name karmalab.net

(limited to 100 certificates)
productinfo.staging.egencia.cloud
wordpress-staging.egencia.cloud
chefsupermarket.karmalab.net
*.int-maui.sb.karmalab.net
*.swagpedia.karmalab.net
wwwegenciacom.int-maui.sb.karmalab.net
expweb.builds.sb.karmalab.net
productinfo-staging.egencia.cloud
*.trunk.sb.karmalab.net
paymentvault.karmalab.net
chelpayslb001.karmalab.net
*.int-milan.sb.karmalab.net
wordpress-staging.egencia.cloud
drac-int-milan.karmalab.net
*.trunk.sb.karmalab.net
paymentvault.karmalab.net
*.int-maui.sb.karmalab.net
opcoraebsap401.karmalab.net
opcoraebsap401.karmalab.net
chelpaypitt004.karmalab.net
wordpress-staging.egencia.cloud
*.int-maui.sb.karmalab.net
paymentvault.int-milan.karmalab.net
evcgateway.karmalab.net
wordpress-staging.egencia.cloud
*.int-maui.sb.karmalab.net
paymentvault-partner.karmalab.net
drac-int-maui.karmalab.net
voyager.expedia.com
wordpress-staging.egencia.cloud
*.int-maui.sb.karmalab.net
wwwegenciacom.int-maui.sb.karmalab.net
*.int-maui.sb.karmalab.net
ewegithub.sb.karmalab.net
productinfo-staging.egencia.cloud
cryptosvc.karmalab.net
*.karmalab.net
*.ewegithub-test.sb.karmalab.net
productinfo-staging.egencia.cloud
chelpaypitt003.karmalab.net
bin-service.int-maui.karmalab.net
productinfo-staging.egencia.cloud
*.expediapartnercentral.com.lisqa7.sb.karmalab.net
*.ewegithub.sb.karmalab.net
paymentvault.internal.karmalab.net
wwwegenciacom.int-maui.sb.karmalab.net
wwwegenciacom.int-maui.sb.karmalab.net
paymentwallet.int-maui.karmalab.net
wwwegenciacom.int-maui.sb.karmalab.net
chelmtp01.karmalab.net
chelappfntes003.karmalab.net
wordpress-staging.egencia.cloud
merchantpoint.karmalab.net

Certificate

The complete raw certificate details for wwwegenciacom.int-maui.sb.karmalab.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aSIUwKCXv3U2Ifvpmv2
ekt7jd4C/wMCtbOOtcpEKH94fUJd5j9TS7krl2ALbKaFSl1M9cenNz8MJabIaS35
R1syN8+Y1qiEj6Ctw7wTRtxB4IRkHecJX5LSDAVRBisv9JtU9iOGVq9CW6piuMko
sgb/4M6cttfy11OxH99kpA8TAZjsFPAcFBY8ynB1sT8febNeJbWFNjoYD/tMr6U8
5bMaiWupyNhnl1SK2wwtR9cc0Hjre0zy3YweMkjGYztkNgOFjGQgu6QxPXkq19qf
E+IgfA5yDFd8cBtP12iMz1WtawRx5xtr9JEW4QB/dJwhnLiI3E0tjQwHSLqLtoP7
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73510056266463887080744207166134739359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-17 06:43:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-16 06:43:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwegenciacom.int-maui.sb.karmalab.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28989705845083095845529249783096655906033967715988995781688385794429375340950675803529816603372115381844272960366884705490552975582022514548743310451514424078488601860566729476128776223007347902502864694809440834685794641819445597790637368688035886447135053803498196725035439098915226042756405565758590098767221989609415714184187667132422527137131039897269103585692468919695194873604459866472714447348511403186655128544538962534319084900818752875607973478926017579866798356094507029038369188487906494449694106500432077513483548422143524284774735928803436635290249288442285005761831161845040978105538586302004355922697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c8f9a405c5cf4101894f52da718428bc0cb1fd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1020 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciacom.int-maui.sb.karmalab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int-maui.sb.karmalab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-maui.sb.karmalab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnertest.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwegenciamaui.egencia.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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