nonprod-corp-multi.libertyinsurance.com.hk

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ac:d4:90:8a:f1:af:d5:ad:00:00:00:00:50:f6:66:27 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRM East
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ac:d4:90:8a:f1:af:d5:ad:00:00:00:00:50:f6:66:27
Serial Number (int): 229730913884282724846447213559051347495
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a9:a8:5f:fa:66:3a:05:eb:4d:19:15:a7:b7:b8:65:7a:a2:24:13:05
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 97:25:69:f7:39:e2:79:86:f8:ee:32:c1:44:95:85:87:6a:6d:1c:d7
Fingerprint (sha256): 28:c2:da:c9:ab:2e:c7:07:81:47:56:8e:46:95:4d:74:8d:2b:de:a9:31:b1:6c:79:0f:dc:1c:73:f7:38:f7:4f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate nonprod-corp-multi.libertyinsurance.com.hk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nonprod-corp-multi.libertyinsurance.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nonprod-corp-multi.libertyinsurance.com.hk

Other certificates including the domain name libertyinsurance.com.hk

(limited to 100 certificates)
uat.libertyinsurance.com.hk
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
digital.libertyinsuranceasia.com
uat.mediedge.com
www.libertyseguros.com.br
uat.mediedge.com
act-dmz.libertyseguros.com.br
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
libertymutual.com
libertymutual.com
uat.libertyinsurance.com.hk
libertyinsurance.com.sg
nonprod-corp.libertyinsurance.com.hk
nonprod-easyclaim.libertyinsurance.com.hk
www.libertyinsurance.com.hk
brmspolicy-uat.libertyinsurance.in
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
uat01.libertyinsurance.com.hk
uat.libertyinsurance.com.hk
digital.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
digital.libertyinsurance.com.sg
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
www.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
libertymutual.com
digital.libertyinsuranceasia.com
uat.mediedge.com
act-dmz.libertyseguros.com.br
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
brmspolicy-uat.libertyinsurance.in
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
uat.mediedge.com
act-dmz.libertyseguros.com.br
uat.mediedge.com
libertymutual.com
uat.mediedge.com
www.libertyinsurance.com.sg
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
act-dmz.libertyseguros.com.br
www.libertyinsurance.com.sg
nonprod-corp-multi.libertyinsurance.com.hk
act-dmz.libertyseguros.com.br
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
act-dmz.libertyseguros.com.br
libertymutual.com
nonprod-easyclaim.libertyinsurance.com.hk
brmspolicy-uat.libertyinsurance.in
dev-buy.libertyinsurance.com.hk
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
nonprod-digital.libertyinsuranceasia.com
libertymutual.com
digital.libertyinsurance.com.sg
act-dmz.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
digital.libertyinsurance.com.sg
non-prod-ppaddressui.libertyinsurance.com.hk
libertymutual.com
uat.mediedge.com
digital.libertyinsurance.com.sg
libertymutual.com
brmspolicy-uat.libertyinsurance.in

Certificate

The complete raw certificate details for nonprod-corp-multi.libertyinsurance.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIRAKzUkIrxr9WtAAAAAFD2ZicwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwODI3MDMyMDA1WhcNMjAwODI3MDM1MDA0WjCBoTELMAkGA1UEBhMCVVMxFjAU
BgNVBAgTDU5ldyBIYW1wc2hpcmUxEzARBgNVBAcTClBvcnRzbW91dGgxHTAbBgNV
BAoTFExpYmVydHkgTXV0dWFsIEdyb3VwMREwDwYDVQQLEwhHUk0gRWFzdDEzMDEG
A1UEAxMqbm9ucHJvZC1jb3JwLW11bHRpLmxpYmVydHlpbnN1cmFuY2UuY29tLmhr
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jMvN4wAUpjgygXYox3W
m/0Zbut1tBXHS4iVykDUfiG+/qHGE3k6fiqLBstHKZnM1XK87eer41uYixYE0tl/
kWRwGTH09cpP44I+BPwnaPcxhV+TYusIeSBa+OSp0dYnOm7otr8NUggVoeuZt1+o
jppovIsJC5VGwAP0E7fOPNt7EHQbS6Gm1b46dGUKvIHQ2FXjmRrG4M7/GqzfN6WV
QrrgRO3qI1E61cinM5csDAZhWHm8JnKZ/ZlVM7bAsgJRqMaFIS1u66i6F4Moh3cQ
JQ4qxGCmsxn6ylg5oTh5Z6vIn+PlhbscBW1QX2zYxVg83GkXy5cLQNklp06q9j+y
2QIDAQABo4IBtjCCAbIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwNQYDVR0RBC4wLIIq
bm9ucHJvZC1jb3JwLW11bHRpLmxpYmVydHlpbnN1cmFuY2UuY29tLmhrMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0f
BCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBL
BgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3
dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggr
BgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0
dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAW
gBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUqahf+mY6BetNGRWnt7hl
eqIkEwUwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAUd0JmkjFx0xtRYqv
TFEjbyZaj7OP9mA1fO84redUwRBabFr3/f0l/nB5oI2YRDiaCpVwIl+gBO6p54Xl
8Wjlafke6X+Hy5km668K8vFR33AmBhY/tLlnMWbbhu8va+ZNK+t0X289yWbYd88U
QrsXLaYMvdH4vtdp1+FWKmwCF9BmVs0iv0TPApX7pwlon89SglRWglx+m0TRGXc/
dVwjyBQW+EbOT8BcC6/zcZndbY4pFkXpQ3udZk+u1Ud/c7A3eAdgjCuZIwMpxLpe
jtxUoojRMRJgUFoRxBOWTrszdrNR05qYf1hN6U9jFmteHCyOUAPCsT3YO+HaeBYS
Ib4iNg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jMvN4wAUpjgygXYox3W
m/0Zbut1tBXHS4iVykDUfiG+/qHGE3k6fiqLBstHKZnM1XK87eer41uYixYE0tl/
kWRwGTH09cpP44I+BPwnaPcxhV+TYusIeSBa+OSp0dYnOm7otr8NUggVoeuZt1+o
jppovIsJC5VGwAP0E7fOPNt7EHQbS6Gm1b46dGUKvIHQ2FXjmRrG4M7/GqzfN6WV
QrrgRO3qI1E61cinM5csDAZhWHm8JnKZ/ZlVM7bAsgJRqMaFIS1u66i6F4Moh3cQ
JQ4qxGCmsxn6ylg5oTh5Z6vIn+PlhbscBW1QX2zYxVg83GkXy5cLQNklp06q9j+y
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 229730913884282724846447213559051347495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 03:20:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 03:50:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRM East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprod-corp-multi.libertyinsurance.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28050143691191174418543615524282244280243431838778859184577749194166990241505327507518893497704458368159436440370206389625698474704195778904799033125518771979609642546702882589045222714741819468789198714594485555718046306005232845890750973113532843890711742822619451150606232314133968739949335267658147362774049812820556552037136597752880953237740070976617865245287823624487047655989559393127919259633045766768405061876068507490543267811033254538886622100568917414902520066963551258340350254210762776957109469583073079684439466693537001115476339485352326846834161528111406144636213767635772976855543130394159952671449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-corp-multi.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9a85ffa663a05eb4d1915a7b7b8657aa2241305
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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