partnerstest.nycsca.org
- New York City School Construction Authority -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number c3:78:5c:ac:99:b9:e6:90:00:00:00:00:50:f4:62:2c was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
New York City School Construction Authority
Organization:
New York City School Construction Authority
State / Province:
New York
Locality: Long Island City
Country: US
Locality: Long Island City
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): c3:78:5c:ac:99:b9:e6:90:00:00:00:00:50:f4:62:2cSerial Number (int): 259824414457586209518727814096996295212
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 8c:4b:6d:0e:24:8f:53:10:81:79:42:0d:6f:fd:e7:43:99:e7:03:c4
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 7c:d5:e3:6e:da:ef:66:94:10:c5:5f:f9:44:96:7a:f4:57:70:33:20
Fingerprint (sha256): 29:73:2d:3c:da:65:91:b8:d9:15:c7:e5:21:08:12:cc:79:01:51:a0:80:a5:a3:82:c7:e7:e0:48:db:52:bb:4e
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate partnerstest.nycsca.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for partnerstest.nycsca.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
partnerstest.nycsca.org
Other certificates including the domain name nycsca.org
(limited to 100 certificates)
afstest.nycsca.org
smstest.nycsca.org
ifatest.nycsca.org
gethelp.nycsca.org
xtregtest.nycsca.org
uidev.nycsca.org
edocs.nycsca.org
adlds.nycsca.org
extwsdev.nycsca.org
extranet.nycsca.org
partnerstest.nycsca.org
msg.nycsca.org
erfp.nycsca.org
erfp.nycsca.org
dobusiness.nycsca.org
tobss.nycsca.org
partners.nycsca.org
scacsg.nycsca.org
bidset.nycsca.org
extwsdev.nycsca.org
cmwsprod.nycsca.org
ssrs.nycsca.org
msg.nycsca.org
partnerstest.nycsca.org
ifa.nycsca.org
extwsuat.nycsca.org
app.mylcm.com
extranetnew.nycsca.org
tk.nycsca.org
ifa.nycsca.org
erfpuat.nycsca.org
portal.nycsca.org
extranet.nycsca.org
cmwsprod.nycsca.org
tobss.nycsca.org
ifauat2016.nycsca.org
tobssuat.nycsca.org
dobusiness.nycsca.org
extwsuat.nycsca.org
laborlaw.nycsca.org
filepad.nycsca.org
adlds.nycsca.org
SCAENEC02.nycsca.org
dobusiness.nycsca.org
SCAENEC01.nycsca.org
laborlaw.nycsca.org
extranet.nycsca.org
partners.nycsca.org
tobss.nycsca.org
sda.nycsca.org
enfovdatest.nycsca.org
dobusiness.nycsca.org
webmail.nycsca.org
laborlaw.nycsca.org
xtregtest.nycsca.org
tobssuat.nycsca.org
adldstest.nycsca.org
Webmail.NYCSCA.ORG
ifaqa.nycsca.org
bidset.nycsca.org
ui.nycsca.org
partners.nycsca.org
smstest.nycsca.org
bidset.nycsca.org
cmwsprod.nycsca.org
ifauat.nycsca.org
portaluat.nycsca.org
tobss.nycsca.org
survey.nycsca.org
laborlaw.nycsca.org
ifa.nycsca.org
ifa.nycsca.org
filepad.nycsca.org
erfpuat.nycsca.org
bidsettest.nycsca.org
laborlaw.nycsca.org
erfp.nycsca.org
smstest.nycsca.org
laborlaw.nycsca.org
sts.nycsca.org
cmwstest.nycsca.org
extranet.nycsca.org
partners.nycsca.org
sitescheduling.nycsca.org
llis.nycsca.org
ifasync.nycsca.org
uiuat.nycsca.org
tobss.nycsca.org
www.nycsca.org
tobss.nycsca.org
dobusinesstest.nycsca.org
dobusiness.nycsca.org
extws.nycsca.org
webmail.nycsca.org
gcu.nycsca.org
webmail.nycsca.org
scacswfe01.nycsca.org
laborlaw.nycsca.org
scacsg.nycsca.org
scazlsrvuat01.nycsca.org
smstest.nycsca.org
ifatest.nycsca.org
gethelp.nycsca.org
xtregtest.nycsca.org
uidev.nycsca.org
edocs.nycsca.org
adlds.nycsca.org
extwsdev.nycsca.org
extranet.nycsca.org
partnerstest.nycsca.org
msg.nycsca.org
erfp.nycsca.org
erfp.nycsca.org
dobusiness.nycsca.org
tobss.nycsca.org
partners.nycsca.org
scacsg.nycsca.org
bidset.nycsca.org
extwsdev.nycsca.org
cmwsprod.nycsca.org
ssrs.nycsca.org
msg.nycsca.org
partnerstest.nycsca.org
ifa.nycsca.org
extwsuat.nycsca.org
app.mylcm.com
extranetnew.nycsca.org
tk.nycsca.org
ifa.nycsca.org
erfpuat.nycsca.org
portal.nycsca.org
extranet.nycsca.org
cmwsprod.nycsca.org
tobss.nycsca.org
ifauat2016.nycsca.org
tobssuat.nycsca.org
dobusiness.nycsca.org
extwsuat.nycsca.org
laborlaw.nycsca.org
filepad.nycsca.org
adlds.nycsca.org
SCAENEC02.nycsca.org
dobusiness.nycsca.org
SCAENEC01.nycsca.org
laborlaw.nycsca.org
extranet.nycsca.org
partners.nycsca.org
tobss.nycsca.org
sda.nycsca.org
enfovdatest.nycsca.org
dobusiness.nycsca.org
webmail.nycsca.org
laborlaw.nycsca.org
xtregtest.nycsca.org
tobssuat.nycsca.org
adldstest.nycsca.org
Webmail.NYCSCA.ORG
ifaqa.nycsca.org
bidset.nycsca.org
ui.nycsca.org
partners.nycsca.org
smstest.nycsca.org
bidset.nycsca.org
cmwsprod.nycsca.org
ifauat.nycsca.org
portaluat.nycsca.org
tobss.nycsca.org
survey.nycsca.org
laborlaw.nycsca.org
ifa.nycsca.org
ifa.nycsca.org
filepad.nycsca.org
erfpuat.nycsca.org
bidsettest.nycsca.org
laborlaw.nycsca.org
erfp.nycsca.org
smstest.nycsca.org
laborlaw.nycsca.org
sts.nycsca.org
cmwstest.nycsca.org
extranet.nycsca.org
partners.nycsca.org
sitescheduling.nycsca.org
llis.nycsca.org
ifasync.nycsca.org
uiuat.nycsca.org
tobss.nycsca.org
www.nycsca.org
tobss.nycsca.org
dobusinesstest.nycsca.org
dobusiness.nycsca.org
extws.nycsca.org
webmail.nycsca.org
gcu.nycsca.org
webmail.nycsca.org
scacswfe01.nycsca.org
laborlaw.nycsca.org
scacsg.nycsca.org
scazlsrvuat01.nycsca.org
Certificate
The complete raw certificate details for partnerstest.nycsca.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHYzCCBkugAwIBAgIRAMN4XKyZueaQAAAAAFD0YiwwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkwNzE1MjAwNDA2WhcNMjExMDEzMjAzNDA1WjCBkzELMAkGA1UEBhMCVVMxETAP BgNVBAgTCE5ldyBZb3JrMRkwFwYDVQQHExBMb25nIElzbGFuZCBDaXR5MTQwMgYD VQQKEytOZXcgWW9yayBDaXR5IFNjaG9vbCBDb25zdHJ1Y3Rpb24gQXV0aG9yaXR5 MSAwHgYDVQQDExdwYXJ0bmVyc3Rlc3Qubnljc2NhLm9yZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALsdQlnKidwRa1mU0NwfaDYSZ+frCtvraRPJp4PZ P9Eshi2lIl7lTf/nFHVYYRpqSsDAxrPTRKXWo4t2jQtpZ20kn6ULT1ueWhyABo73 6GQ7iCkDRX3wgihJTZbM65DOjLV6rGg/x1JOmqJhWsUslbrbhUyfSnU+QvCaeyQd jHDxq6JfcbjX8NqL0qUTiJYW/hRhJZeFax2XXRR43TzgYYguPn7KZXfFNgkjLE/E 4gk5qs86owgZjJKUUezbNOFEzC2n87rKzqn8cvQD8j+dnHi2zxMw+McS7MYJ3RUQ vFP42zOY/86gZ0cj9UYbADceyxB+iwfvsmg2x/iuiHkv8MsCAwEAAaOCA4cwggOD MCIGA1UdEQQbMBmCF3BhcnRuZXJzdGVzdC5ueWNzY2Eub3JnMIIB9QYKKwYBBAHW eQIEAgSCAeUEggHhAd8AdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCD DwAAAWv3V7EMAAAEAwBIMEYCIQCjbBQxyx3t9Fc++88+k5eGqfxuNyBS4U4jFkMR OiDBJgIhAKHa1e7FykFqld9oJYS5fAtqvTbZ7XB+kn1QjjC7752jAHYAVYHUwhaQ NgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFr91exQwAABAMARzBFAiEA7dQR Nq+15vyK7AcPN7EqSw6x/CJ0q6gMAUuhRe3WCMUCIHYHhj1pNM6z3t87rka9S2Rw 6470gAPmUVkgRvbjqzAnAHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ 0N0AAAFr91exXQAABAMARjBEAiBN5ZMVcCnBJHXV13pPy7WbLRSZhLaOigedt78j MjpxtAIgf74LUR/VViIk5CyR9/CXeaBmV8L/FcNNSYrdRtAWiqUAdQC72d+8H4px tZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWv3V7EYAAAEAwBGMEQCIChIAL3Z thPJ2W7ZTyIGajCrTXXYKCqiIXPwdrnP/YysAiBu0BQ9whemnGQhntpiuqALTuaL jIZXzyXl2s2lpSDUZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVz dC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBo BggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3Qu bmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFp bjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0O BBYEFIxLbQ4kj1MQgXlCDW/950OZ5wPEMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL BQADggEBABA9FFr5d5k0/b2iCxyKJ3mlPEbfV89PUHeB59e7isojTnbS+F0CVGfq Ba0Cl1g/dccbaDk53wtSCer5msRE1elbKdn+s4srz8Tdct25fUeyJ+sH2sRbbMje aUvBAFam7TZHrWEkJYUmIrzf9E2nwCQtbcycRiQWdSLO21J67QaJUfBiZcM3nufN oDdC5AS4GiOF9/Rd4PtZgNSDQ7/J+X0Yi2NSDsPR2COd2cHo10bkdOAtjNwbGPoc mDDiDNpDR4WkVtoCyx/XJJJ8k2FQ0Q61FwYRSqwLq08Fr7KyE7AuCwPJhvlER2kL 8p6HC3ubnHPT/7e9Vnv3qRxtX8YO2uQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux1CWcqJ3BFrWZTQ3B9o NhJn5+sK2+tpE8mng9k/0SyGLaUiXuVN/+cUdVhhGmpKwMDGs9NEpdaji3aNC2ln bSSfpQtPW55aHIAGjvfoZDuIKQNFffCCKElNlszrkM6MtXqsaD/HUk6aomFaxSyV utuFTJ9KdT5C8Jp7JB2McPGrol9xuNfw2ovSpROIlhb+FGEll4VrHZddFHjdPOBh iC4+fspld8U2CSMsT8TiCTmqzzqjCBmMkpRR7Ns04UTMLafzusrOqfxy9APyP52c eLbPEzD4xxLsxgndFRC8U/jbM5j/zqBnRyP1RhsANx7LEH6LB++yaDbH+K6IeS/w ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 259824414457586209518727814096996295212 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 20:04:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 20:34:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Long Island City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York City School Construction Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partnerstest.nycsca.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23620991269343117703209435740307988354526495455625279528537323155801816745013066167604357346533328127878447655557705670022929050855592498506795982898884012979224048721958963017932848068300237253624320251987881291416318855021180309137480753854304624012361779839762254344276452581503693290281162118920149810874252789301947523931975345144880071870755963379116629528097226099408089758926237585097289962117039589923562202242226280325277035996851767910242442545273934972011476325021335200751432460158247490560030679929646646046525439550189215489932706787977093797823171394436202995150598408718835663840244326315973984383179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerstest.nycsca.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c4b6d0e248f53108179420d6ffde74399e703c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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