secure.mdl.io

- Mindfireinc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2b:dd:49:74:a3:ac:98:b1:00:00:00:00:50:f7:e0:e1 was issued on by Entrust, Inc..

With 197 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mindfireinc

Organization: Mindfireinc
State / Province: California
Locality: Irvine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:dd:49:74:a3:ac:98:b1:00:00:00:00:50:f7:e0:e1
Serial Number (int): 58305791281510210574005111935464890593
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9a:13:14:db:99:98:0b:ca:72:c5:b4:d2:50:6e:65:b0:a8:f3:49:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9c:89:af:ab:e0:c3:95:d6:c1:ce:f7:eb:40:4f:41:d9:4e:51:eb:fa
Fingerprint (sha256): 2f:db:41:46:f6:2d:ef:2f:7c:0c:52:99:c5:26:71:d8:ad:f6:15:6e:d7:4f:3c:e7:09:da:70:2a:f6:1b:53:8d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate secure.mdl.io

197

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.mdl.io
letsgo.lasell.edu
www.albion-college.com
www.BHGLoan.com
be.tabor.edu
www.BHGcards.com
www.bhgloans.com
www.BHGProLoan.com
www.bhgpowercard.com
go.monmouthcollege.edu
www.igive2epic.com
studio.mdl.io
welcometothefamily-customerdirect.m.mdl.io
petcothinkadoptionfirst.m.mdl.io
studio.afw.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io
microsite.container.mdl.io
members.championshipcommitment.com
www.mybhgcards.com
www.mycapitalnow.com
tracking.mdl.io
www.supportecfs.org
www.supporthm.org
applymjur.stmarytx.edu
*.my-dv.com
your.lr.edu
www.grouplegalplanoffer.com
www.investdbq.com
rewards.kewadin.com
www.applyelastic.com
itspersonal.martinmethodist.edu
be.hendrix.edu
www.metpdpnetworkdev.com
www.bhgandbanks.com
www.metpdp.com
getsxm.com
www.getsxm.com
monitor.mdl.io
werhome.oc.edu
www.mobltycarpetone.com
hippos.win2wild.com
www.givingmu.com
www.welcometoharvey.com
*.secure.mdl.io
www.edwardsupdate.ca
apply.keystone.edu
promise.keystone.edu
getinfo.cps.gwu.edu
www.lvcscholarship.com
optin.onestarrewards.com
www.BHGPersonal.com
belongat.bw.edu
www.firespringpromo.com
mymccalling.com
DiscoverLACollege.com
faulknerlawschool.com
discoverShorter.com
BPCforMe.com
TransfertoMC.com
YourMCcalling.com
bstrong.wtamu.edu
motiontosucceed.com
www.wpc4cc.com
www.supportsacredheartgreenwich.org
give.dwight.edu
www.cornhuskerbankpowerchecking.com
www.metdhmo.com
experience.coker.edu
imustgo.mhu.edu
www.myemprisebank.com
go.belmontabbeycollege.edu
www.helpyourretirement.com
www.coffeewithtravis.com
www.fdlcrewards.com
www.arcfulfill.com
*.getkasasacash.com
*.getkasasacashback.com
www.yourelastic.com
www.c1mm.com
louisianacollegedigital.com
shorterudigital.com
onelimestone.com
www.rittersoffer.com
www.explorehpu.com
www.explorebrenau.com
www.explorewwc.com
www.explorewestminster.com
www.yourloyola.com
www.gohusson.com
www.explorelesley.com
www.explorelvc.com
www.discoveraic.com
www.youbelongatwells.com
www.gonewmanu.com
www.explorenewcollege.com
www.thinkmeredith.com
connect.linfield.edu
www.championshipcommitment.com
*.getkasasaloans.com
lifecall.truett.edu
opportunity.shawu.edu
weare.su.edu
www.powerchecking.net
app.beaconcollege.edu
www.mbugifted.org
designers.laserimagenc.com
discover.daemen.edu
www.harrychapinsurvey.org
my.lanepress.com
www.Freshstartfast.com
www.clarkhighered.info
www.Needfreshstart.com
www.explorealbion.com
www.discoveruindy.com
www.gofloridapoly.com
www.discoversmcm.com
www.discoverwitt.com
www.explorebellarmine.com
www.discovervalpo.com
www.myelmsexperience.com
www.exploredepauw.com
www.choosegannon.com
www.manchesterbschool.com
www.augradprograms.com
www.harvardextnow.com
www.ptkatharvard.com
www.summeratharvard.com
forms.microf.com
online.onelimestone.com
ready.xula.edu
www.newrezrefi.com
limestone.education
www.supportbrooke.org
www.avicasinorewards.com
www.casinookrewards.com
www.commercialmaintenanceprogram.ca
www.goldriverrewards.com
www.givingbackcanes.com
*.sharekasasaloans.com
giveaways.thumbcellular.com
www.accessmycardoffer.com
www.limestone-digital.com
www.faualumnimembership.com
www.afgarchives.com
Identity.mdl.io
Edge.mdl.io
Client.mdl.io
www.buildingbcs.com
www.blackbearrewards.com
www.winwithradiate.com
transfertolimestone.com
www.gettoknowud.com
tmg.leehealthfoundation.org
www.mycaoffer.com
www.CbnCs-Marketing.com
www.aksteelinvestorday.com
www.mymetdental.com
*.guardretention.com
*.guardofficers.com
*.guardsfab.com
*.guardwarrant.com
*.guardrsp.com
affordmyfuture.com
exploreTFC.com
www.gettoknowpmi.com
www.FSGLoans.com
www.FSGLoan.com
TransferToCatawba.com
BelongAtCatawba.com
www.bellarmineaid.com
2beprepared.pointloma.edu
beprepared.pointloma.edu
www.swhpagentroadshow.com
HI.liveherelearnhereservehere.com
CA.liveherelearnhereservehere.com
IA.GuardFastTrack.com
info.wnegoldenbearclub.com
onwardto.owu.edu
onward2.owu.edu
www.diamondcustomersurvey.com
myAUstory.anderson.edu
mystory.anderson.edu
watchmego2.washjeff.edu
watchme.washjeff.edu
www.openyourmindnow.com
centered.dordt.edu
experience.dordt.edu
donate.newarka.edu
explore.centre.edu
www.theartofcampaigns.com
donate.chapin.edu
www.OnMyWayToNCAT.com
www.OnMyWay2NCAT.com
www.TransferMeToNCAT.com
cpcknights.com

Other certificates including the domain name mdl.io

(limited to 100 certificates)
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
studio.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
studio.dashboard.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io

Certificate

The complete raw certificate details for secure.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5T
aEIIuxqEa/HN0ofFmq/lqtp33ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/
tvS10KhAU2Ffzp1YWoxiFyRXgbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/
qZfsianbV02APBVR/Qfy+FTgAGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgA
rqP/c3JJF17EWopm/EVdFvEBv19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49B
Fm9FujTdykxdvr1q9zNH15NQCB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58305791281510210574005111935464890593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 21:58:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-21 22:28:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mindfireinc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951563452781109146057106392320226867107000374229101798015474952460603726911991854852083812187781988271179003750789017090612383066931286354568744127269341469194633587084064186594382380309598888000395093878687446126016630170284238938965547827285598923799327864755580089993702511150115546208965454260860994738074217442916082208995375929856279017354403501537507855236546290516823457160534480645279233472204278201703889873993923035009212008348742274919543512527007662929090692110470340849541123982874948530651309660094007907158238537985025279028193304796415915389367590604571312619101468167282531565955541987601938668817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4395 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgo.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-college.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tabor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGProLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.monmouthcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothefamily-customerdirect.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcothinkadoptionfirst.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybhgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycapitalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportecfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supporthm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applymjur.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-dv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.lr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grouplegalplanoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investdbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.kewadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applyelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspersonal.martinmethodist.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hendrix.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdpnetworkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werhome.oc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobltycarpetone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometoharvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwardsupdate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promise.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinfo.cps.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin.onestarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGPersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belongat.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firespringpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymccalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DiscoverLACollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulknerlawschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverShorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BPCforMe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransfertoMC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'YourMCcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bstrong.wtamu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiontosucceed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpc4cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsacredheartgreenwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dwight.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornhuskerbankpowerchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metdhmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imustgo.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myemprisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.belmontabbeycollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpyourretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeewithtravis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcfulfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacashback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianacollegedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorterudigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rittersoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorehpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebrenau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewestminster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourloyola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gohusson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveraic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youbelongatwells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonewmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorenewcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.linfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifecall.truett.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.shawu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weare.su.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerchecking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.beaconcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbugifted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designers.laserimagenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.daemen.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrychapinsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lanepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Freshstartfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarkhighered.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Needfreshstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorealbion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveruindy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gofloridapoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoversmcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoverwitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebellarmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovervalpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myelmsexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exploredepauw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosegannon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchesterbschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augradprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvardextnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptkatharvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summeratharvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.microf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ready.xula.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrezrefi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limestone.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportbrooke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avicasinorewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinookrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialmaintenanceprogram.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldriverrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingbackcanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharekasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveaways.thumbcellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessmycardoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limestone-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faualumnimembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afgarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Identity.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Edge.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Client.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildingbcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackbearrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winwithradiate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfertolimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettoknowud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmg.leehealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycaoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.CbnCs-Marketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aksteelinvestorday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymetdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardretention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardofficers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardsfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardwarrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardrsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordmyfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploreTFC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettoknowpmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.FSGLoans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.FSGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransferToCatawba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BelongAtCatawba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellarmineaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2beprepared.pointloma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beprepared.pointloma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swhpagentroadshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HI.liveherelearnhereservehere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CA.liveherelearnhereservehere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'IA.GuardFastTrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.wnegoldenbearclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwardto.owu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onward2.owu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondcustomersurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myAUstory.anderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystory.anderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchmego2.washjeff.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchme.washjeff.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openyourmindnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centered.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.newarka.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartofcampaigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.chapin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.OnMyWayToNCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.OnMyWay2NCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TransferMeToNCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcknights.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1314db99980bca72c5b4d2506e65b0a8f34952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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