sts.services.lnm.scotiabank.com

- Bank of Nova Scotia -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 57:d9:88:10:56:92:49:31:2a:f3:05:38:90:a4:a4:95 was issued on by Entrust, Inc..

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank of Nova Scotia

Organization: Bank of Nova Scotia
State / Province: Ontario
Locality: Toronto
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:d9:88:10:56:92:49:31:2a:f3:05:38:90:a4:a4:95
Serial Number (int): 116772323753738995047467334245852423317
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:dd:9c:fc:4a:3a:e0:39:7c:d1:b7:3a:86:0f:3b:18:e0:d2:02:1d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f4:b0:0c:ec:68:15:a1:1d:ad:b9:f2:ff:b3:ae:39:ef:29:6c:c8:f4
Fingerprint (sha256): 28:bb:db:87:92:1e:7d:aa:28:8d:c3:fb:18:76:5e:92:5e:c7:3b:bc:22:5e:ce:d3:5e:b8:50:9f:aa:c2:ba:65

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sts.services.lnm.scotiabank.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.services.lnm.scotiabank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.services.lnm.scotiabank.com
autodiscover.scotiabank.com.mx
mrsmx1.scotiabank.com.mx
mrsmx2.scotiabank.com.mx
mrsmx3.scotiabank.com.mx
mrsmx4.scotiabank.com.mx
autodiscover.scotiabank.cl
autodiscover.cr.scotiabank.com
autodiscover.co.scotiabank.com
ews.scotiabank.cl
ews.co.scotiabank.com
mrscl1.scotiabank.cl
autodiscover.pa.scotiabank.com
mrs13mx.scotiabank.com.mx
mrs1sbp.scotiabank.com.pe
mrs1sbu.scotiabank.com.uy
mrs1pro.pronto.com.uy
mrs1prf.profuturo.com.pe

Other certificates including the domain name scotiabank.com

(limited to 100 certificates)
www.mtg.scotiabank.com
www.investorsolutions.gbm.scotiabank.com
www.scotiaonline.scotiabank.com
cdb-ux-mobile-banking-search.scotiabank.com
5638916786880512-fe1.pantheonsite.io
saapi.edocuments.scotiabank.com
mobilebanking.scotiabank.com
mobilebanking.scotiabank.com
wmuat.scotiabank.com
spv-exnc1.rav.scotiabank.com
maps.scotiabank.com
bnsdevelopers-npi-test.scotiabank.com
secure09.lithium.com
scvmwmlpvcse5.scotiabank.com
salesbuilder-services-nft.Scotiabank.com
etransfer-services-uat.scotiabank.com
tradepro.wealthmanagement.scotiabank.com
www.scotiabank.com
humapp.scotiabank.com
apis-dev.scotiabank.com
sdpaplwm012.scotiabank.com
www.uat.scotiaonline.scotiabank.com
www.scotiaconnectuat.scotiabank.com
stage-subscriptions.scotiabank.com
sip03.scotiabank.com
qat.tradexpressep.scotiabank.com
5638916786880512-fe1.pantheonsite.io
www.mtg.scotiabank.com
cdp.scotiabank.com
www.remotedeposit-UAT1.scotiabank.com
app2.scotiaonline.scotiabank.com
www.scotiabank.com
dynamicfundscrmtalend-prd.scotiabank.com
ciam-stargate-ist.apps.cloud.scointnet.net
arm4.scotiabank.com
mobilebanking3.scotiabank.com
saapiuat.edocuments.scotiabank.com
www.scotiamortgageauthority.scotiabank.com
www.appls.pp.scotiabank.com
www.appssc.scotiabank.com
arm4f.scotiabank.com
sip02.scotiabank.com
ccau-wave.scotiabank.com
www.mtg.pp.scotiabank.com
apis-dev.scotiabank.com
www.uat.scotiaworld.com
ads.scotiabank.com
apis-secure-sandbox.scotiabank.com
www.uat.scotiaworld.com
passport.scotiabank.com
automotive.scotiabank.com
www.uat.scotiaworld.com
arm5.scotiabank.com
mobilebanking.scotiabank.com
awo365lprd.scotiabank.com
www.wave.scotiabank.com
5672749318012928-fe3.pantheonsite.io
uaturs.scotiabank.com
scvmbarpvcse10.scotiabank.com
uas1-uat.cams.scotiabank.com
hod.scotiabank.com
dmts.scotiabank.com
copaoro.scotiabank.com
arm6.scotiabank.com
research.edge.gbm.scotiabank.com
app.scotiaonline.scotiabank.com
gwmsbiuat.scotiabank.com
app.scotiaonline.pp.scotiabank.com
5672749318012928-fe3.pantheonsite.io
developer.api.scotiabank.com
www.uat.scotiaworld.com
momentum.emaildm.scotiabank.com
alerts-ncc.scotiabank.com
sdpaplba012.scotiabank.com
mxb2.scotiabank.com
NSCCP-SFTP.scotiabank.com
trapii.scotiabank.com
getgrowingforbusiness.scotiabank.com
home.scotiabank.com
maps.scotiabank.com
developer.api.scotiabank.com
www.scotiaconnect.scotiabank.com
unsubscribe-extuat.gbm.scotiabank.com
5731068866985984-fe4.pantheonsite.io
secure06.lithium.com
cacs.gateway.scotiabank.com
scotiarewards.scotiabank.com
nft.sfxser.gbm.scotiabank.com
www.uat.scotiaworld.com
content21.scotiabank.com
copaoro.scotiabank.com
www.unsubscribe.gbm.scotiabank.com
email.scotiabank.com
DTCP-SFTP.scotiabank.com
saapiuat.swm-svc-statements.scotiabank.com
www.uat.scotiaworld.com
wealth2.scotiabank.com
sa1apidev.edocuments.scotiabank.com
swmp.scotiabank.com
sa1uat.edocuments.scotiabank.com

Certificate

The complete raw certificate details for sts.services.lnm.scotiabank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjech4VvIKm1MKS0leXm
9cQwIgWc2fcyjeNlO9Oa4SRimpgs0xtkepKatiR55yy4vzHn+vIXr2c34VazLbnk
Pt6KE4TbRtPPzG/pUip8LRjN60mLVYzgg4a/2OckH0EIEAVXiFkiGvFH1JPYrqBr
a+UzDHlHCD1dbEh6eyN2HePSbMQ/V24Vj5lwpDg1dhiq3Tg+lC0JPFVAlFqODcMd
DisBEzDtKQlTsi3RCqOO+SkZeHosT99EOlwI4DtKO4NL++9wbYb94uy5pL+EBwNl
I72h0gKucHlraDALDmXAQlAljkF7Avq/6KnStVO1p2W6PSY3OCAZzfDCb8ClfOZc
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116772323753738995047467334245852423317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 13:04:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-30 13:04:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank of Nova Scotia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts.services.lnm.scotiabank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18458215549603648816432592370548355206991107098333547576969613016731830189869079826692525688936760273538465330339211495384053929561881844073119642061317229371948265843657327882789100661489137391629199129804523671232691184992112509841612075052977816756185630661156111368119964718154772545589973715212267212492575608657768351138204212096637943265720412962887290908992844218594814995552384174698728852825257796882934023974380960238050574276686244841078393810093010481200006961934340188819848236983272889136375947083432356272528848474842992200197498575332243516144384854248100547220568534415895247255842448438398623833157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7dd9cfc4a3ae0397cd1b73a860f3b18e0d2021d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (491 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.services.lnm.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scotiabank.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmx1.scotiabank.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmx2.scotiabank.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmx3.scotiabank.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmx4.scotiabank.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scotiabank.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cr.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.co.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.scotiabank.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.co.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrscl1.scotiabank.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pa.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs13mx.scotiabank.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs1sbp.scotiabank.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs1sbu.scotiabank.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs1pro.pronto.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs1prf.profuturo.com.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b5294bfbc2bf2ce282b8f5401e4a5329cb03b91091a2169298b2c6231ebb61a83c97dec1a3a7bfdf1313de584b3badaa7bed63a3fb7e15a51bba416759a9ea5a1d46f4d2752ed549b59a79878082a0b467d0f75ebf77f4533261c456a9e897bbc0b92850d7b98f287535f20a1061ac55b2f5baa2a511d6dd024a2b93111755d43dc89a88fe9d71d92857f9bb5996b5daab60d4fc76df99bc6baee3999a5b561bfa1e497345937151ed1827843a6a6bb31301c35eaff531554792d3f5b3f013e3332bd8577033915cb9f6600d0c8cd7b18d51b1affa94c6c9cc6f23a7d9a3c33e83704ca8e05c80a2c67d7ff32443fbf037d166b9be515ca1940750b9e69d33de