evupdater.entrust.net

- Entrust, Inc. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 98:69:ae:b2:00:00:00:00:54:cc:a1:b8 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Entrust, Inc.

Company registration number: 115868500
Organization: Entrust, Inc.
State / Province: Ontario
Locality: Kanata
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 98:69:ae:b2:00:00:00:00:54:cc:a1:b8
Serial Number (int): 47169483679192450949500936632
Serial Number lenght: 96 bits, 12 octets

SubjectKeyId: a7:2a:b3:1e:0e:23:b8:8f:31:5c:89:3e:ed:9f:f5:99:26:18:ec:4e
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 8b:55:c0:c0:99:aa:12:b4:c5:8a:78:a0:f7:c3:a2:ac:f1:52:1e:60
Fingerprint (sha256): 2a:76:f6:3b:39:a8:36:06:b7:2d:35:ac:38:d9:68:4a:ce:69:0a:43:98:66:2d:2f:8e:3c:8c:eb:79:e7:0e:11

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate evupdater.entrust.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for evupdater.entrust.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

evupdater.entrust.net

Other certificates including the domain name entrust.net

(limited to 100 certificates)
www.entrust.net
buy.entrust.net
validg2.entrust.net
www.entrust.net
validec.entrust.net
ottmgmt.entrust.net
certenroll.entrust.net
testcertificate5.entrust.net
discovery.entrust.net
privateott.entrust.net
validecc.entrust.net
confirm.entrust.net
home.entrust.net
revokedg2.entrust.net
testcertificate.entrust.net
cloud.entrust.net
revokedg2.entrust.net
managed.entrust.net
stgportal.entrust.net
validp384tlsr2022.entrust.net
Taha.test2.entrust.net
confirm.entrust.net
enroll.entrust.net
www.entrust.net
validev.entrust.net
certenroll.entrust.net
privateott.entrust.net
partners.entrust.net
evupdater.entrust.net
www.entrust.net
revokedg2.entrust.net
validev.entrust.net
validec.entrust.net
home.entrust.net
stgportal.entrust.net
validec.entrust.net
evupdater.entrust.net
testcertificate8.entrust.net
validev.entrust.net
cloud.entrust.net
managed.entrust.net
validp384evtlsr2022.entrust.net
ecscloudapp.entrust.net
vira.entrust.net
privateott.entrust.net
www.entrust.net
www.entrust.net
indusfaceconsulting.entrust.net
partneradmin.entrust.net
testcertificate.entrust.net
ecsf2f.entrust.net
enroll.entrust.net
logininternal.entrust.net
validev.entrust.net
enroll.entrust.net
expiredg2.entrust.net
certchecker.entrust.net
revokedev.entrust.net
ecsf2f.entrust.net
validg2.entrust.net
www.entrust.net
verification.entrust.net
discovery.entrust.net
www.entrust.net
testcertificate2.entrust.net
evupdater.entrust.net
expiredg2.entrust.net
ecsigfmexternal.entrust.net
saml.managed.entrust.net
revoked4kevtlsr2022.entrust.net
revokedg2.entrust.net
expiredg2.entrust.net
buy.entrust.net
partners.entrust.net
login.entrust.net
managed.entrust.net
login.entrust.net
www.entrust.net
expiredev.entrust.net
ocsp.entrust.net
ottinfragw.entrust.net
ecsf2f.entrust.net
ott-aftadc02.int.entrust.net
tormgmt.entrust.net
privateott.entrust.net
certenroll.entrust.net
buy.entrust.net
vira.entrust.net
ssltest.entrust.net
testcertificate.entrust.net
timestamp.entrust.net
revokedec.entrust.net
www.entrust.net
privatetor.entrust.net
managed.entrust.net
test.testcertificates.com
www.entrust.net
cloud.entrust.net
testcertificate2.entrust.net
2048test.entrust.net

Certificate

The complete raw certificate details for evupdater.entrust.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjjCCBnagAwIBAgINAJhprrIAAAAAVMyhuDANBgkqhkiG9w0BAQsFADCBujEL
MAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1Nl
ZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDE0
IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UE
AxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0xNjA0
MDcxMzI2MTBaFw0xODA0MDcxMzU2MDlaMIHIMQswCQYDVQQGEwJDQTEQMA4GA1UE
CBMHT250YXJpbzEPMA0GA1UEBxMGS2FuYXRhMRMwEQYLKwYBBAGCNzwCAQMTAlVT
MRYwFAYLKwYBBAGCNzwCAQITBVRleGFzMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMu
MR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjESMBAGA1UEBRMJMTE1ODY4
NTAwMR4wHAYDVQQDExVldnVwZGF0ZXIuZW50cnVzdC5uZXQwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQD9wbG9FUk21HDtZtKqo2RT+lCgV0rak13vxq9B
rMYg31RYBWBuYJSe4lEVsWbHdqQXKnkCgbSABjdFFlwJHuk6o0yrUakC87qcdWuC
lj958ALRuKdYlUq8+yDRmeR9Ij2aLILNx/EeeykjbuWbhfWwnyYTULa4YXiaAjXO
jTfa8N8DdO0RSnN/kXFTxMb5ZmG3o592ZcPLjyvBx6VHOb99g068eFPj0X8KfAw5
b9RQMtQ/FnyhmL/bdZd60VMmu0L8/WlIo6spBctpexH9nGYa4LzcJGpx15Y8p0dX
jwCbXCgS+KGQfIpyCCpdueQFISwbkNbhpi1jwD94zlgr0U7PAgMBAAGjggOBMIID
fTAgBgNVHREEGTAXghVldnVwZGF0ZXIuZW50cnVzdC5uZXQwggH1BgorBgEEAdZ5
AgQCBIIB5QSCAeEB3wB3AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT/vE
AAABU/ECRL4AAAQDAEgwRgIhAP1H24ye7VE3YcXrYs75c7PlIPTgeqouyc0oESjd
oSI/AiEA8YTl2tCgbYbqYz+grXfBD2UhW+RzhnwwTN8XdGDCmbMAdgBWFAaaL9fC
7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAVPxAkgQAAAEAwBHMEUCIEwOJ596
W7PAJqdpZaO+tGQXipnctZ0ya3DmGCZzuo7KAiEA01BMFQ6Jytl7z9WFsdgUmyqu
7x2Xh0TNeJRZnKp6NpIAdQB0YbSgnPs9QddRWVdbLnZJpEWo0ncJsMxWSmSCt+tB
owAAAVPxAkqwAAAEAwBGMEQCIBZk8r/xZIRXRLmRxJxvTZOsdACBhq5X3c6W19Ov
iwAxAiAFYkKPn1UC5Wbbnf6AtJxqWVY3pfjyW78fMWm8l40mHwB1AKS5CZC0GFgU
h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABU/ECTA8AAAQDAEYwRAIgdeqlo1I1
D9bu1zXHTklvMYbdU0i1LK1PWcTCqryBFiYCIFn+ZnBEoir8Asc9hES/dgV3Cyr1
keLr+oXDe7O12qAdMAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz
cC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5l
dC9sMW0tY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwu
ZW50cnVzdC5uZXQvbGV2ZWwxbS5jcmwwSgYDVR0gBEMwQTA2BgpghkgBhvpsCgEC
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAcGBWeB
DAEBMB8GA1UdIwQYMBaAFMP30LUqMK2vDZEhcDlU3byJcMc6MB0GA1UdDgQWBBSn
KrMeDiO4jzFciT7tn/WZJhjsTjAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IB
AQCOIQnrqpvTIjpV619ivRWMfP1ZMIN4fQXZuuOterDvj0oUvN/fgK5B6P8qAwiA
kT3B3qXtS1TJyLPv95F8EfAOhSLpv2OYkngnIY7KWRW8HovjiCUg8By+mN1kayhD
GdG8NXPHinkJJX4X5MWWBDKlOXFk7ot7AZMhWb9E5xBsHLp+c8aWPeTSHU6ZTZdg
H5nw5S1ZrHYmkltEA6C5fF46S54WZ7UtQFLLR4QhyYRagFEcU1TVH/BK488TB9il
h36md/VUXxD7i/vsWclKSycSX5IHuf84uY0amxjLsU4C74WW8XlT83aP6B3h3ENH
rKvAmxxH2/T8GPiXAuCnepT/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/cGxvRVJNtRw7WbSqqNk
U/pQoFdK2pNd78avQazGIN9UWAVgbmCUnuJRFbFmx3akFyp5AoG0gAY3RRZcCR7p
OqNMq1GpAvO6nHVrgpY/efAC0binWJVKvPsg0ZnkfSI9miyCzcfxHnspI27lm4X1
sJ8mE1C2uGF4mgI1zo032vDfA3TtEUpzf5FxU8TG+WZht6OfdmXDy48rwcelRzm/
fYNOvHhT49F/CnwMOW/UUDLUPxZ8oZi/23WXetFTJrtC/P1pSKOrKQXLaXsR/Zxm
GuC83CRqcdeWPKdHV48Am1woEvihkHyKcggqXbnkBSEsG5DW4aYtY8A/eM5YK9FO
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47169483679192450949500936632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-07 13:26:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-07 13:56:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kanata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '115868500'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'evupdater.entrust.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32033805371380446393695187061822796189700438800197609651623323297701063100112423122521602510126387700456466768636145217097045674736299323965744486530843569711236829538743512499139393886287985094112335362773029296443457009128998589425521311928354751525307325893420065855912761464921640501683663605861454466133832440075099477510565020757678380003476552525819462282766556379959661646232848024698693439664571671228417519900992570218773798821380338713805001113735453678969127844402120672266734122969270821724066230868000709247746843666956102977601082338227206956409896117369277790946803675137586459175858774067803778535119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evupdater.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a72ab31e0e23b88f315c893eed9ff5992618ec4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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