www.humanamarketpoint.com

- Humana Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d3:9c:82:b4:ab:2e:0f:a1:00:00:00:00:51:04:84:4e was issued on by Entrust, Inc..

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Humana Inc.

Organization: Humana Inc.
Organization unit: HUM
State / Province: Kentucky
Locality: Louisville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d3:9c:82:b4:ab:2e:0f:a1:00:00:00:00:51:04:84:4e
Serial Number (int): 281279756447844030650065245734338593870
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c4:2c:7c:23:62:a9:28:8c:4d:16:1f:32:b1:a5:b6:71:28:79:b3:3c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): cf:8f:16:7b:26:44:14:23:68:a0:50:72:79:61:65:8f:8a:f0:68:c1
Fingerprint (sha256): 34:76:a5:8d:78:86:06:c1:c9:fa:30:08:8e:30:48:57:58:4a:76:82:e5:14:b7:5c:6e:45:5d:3b:87:7d:65:9f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.humanamarketpoint.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.humanamarketpoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.humanamarketpoint.com
ebi.humana-military.com
ecaservices.humana-military.com
eir.humana-military.com
eir.humana-veterans.com
mail.onlinesecuremail.com
medcoaching.humana.com
moxie1.humana-military.com
moxie3.humana-military.com
moxie4.humana-military.com
myhealthinformation.fromyourdoctorsoffice.com
our.humana.com
pws.careplus-hp.com
sales.humana.com
wkdgcomm.humana.com
www.humanamemberassistanceprogram.com
www.marketplace.humana.com
www.saia.infonowweb.com

Other certificates including the domain name humanamarketpoint.com

(limited to 100 certificates)
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
s3.humana.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com

Certificate

The complete raw certificate details for www.humanamarketpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIpzCCB4+gAwIBAgIRANOcgrSrLg+hAAAAAFEEhE4wDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MjAwNTE1MTI1ODA2WhcNMjEwNTE1MTMyODA1WjB9MQswCQYDVQQGEwJVUzERMA8G
A1UECBMIS2VudHVja3kxEzARBgNVBAcTCkxvdWlzdmlsbGUxFDASBgNVBAoTC0h1
bWFuYSBJbmMuMQwwCgYDVQQLEwNIVU0xIjAgBgNVBAMTGXd3dy5odW1hbmFtYXJr
ZXRwb2ludC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ho+m
dCg8bjQUeMC1rptmJEVJqCGPfGxBRkmvJPhLGImbGrRgrGQkyl8hgchcnjMqQBJA
rYItdMoxsuuKQjMlrlUuU3OJatkPnFdqAfzM14wpfmDn44MWeSlgQc1oYBN7Ss6B
9rnPg97L/jEUvQB4oLB1jk9C8NcAc76S20Oj9DjEYvm21pJSlodh4DXljcEVh3F2
iI5n/65fYJYDfHnQrMGhr2xTTtxhfmDi6w6vdDqY0Kzko2q64EXpHdfrhNd2FFoa
UHEUbHt2BOnW+atL7EUKJ7RJwar9krQx8x2b3kmpq7USYAZ8FxXV6x4lD0MKQFUe
erGy9jPP+fG60OOvAgMBAAGjggTiMIIE3jCCAfIGA1UdEQSCAekwggHlghl3d3cu
aHVtYW5hbWFya2V0cG9pbnQuY29tghdlYmkuaHVtYW5hLW1pbGl0YXJ5LmNvbYIf
ZWNhc2VydmljZXMuaHVtYW5hLW1pbGl0YXJ5LmNvbYIXZWlyLmh1bWFuYS1taWxp
dGFyeS5jb22CF2Vpci5odW1hbmEtdmV0ZXJhbnMuY29tghltYWlsLm9ubGluZXNl
Y3VyZW1haWwuY29tghZtZWRjb2FjaGluZy5odW1hbmEuY29tghptb3hpZTEuaHVt
YW5hLW1pbGl0YXJ5LmNvbYIabW94aWUzLmh1bWFuYS1taWxpdGFyeS5jb22CGm1v
eGllNC5odW1hbmEtbWlsaXRhcnkuY29tgi1teWhlYWx0aGluZm9ybWF0aW9uLmZy
b215b3VyZG9jdG9yc29mZmljZS5jb22CDm91ci5odW1hbmEuY29tghNwd3MuY2Fy
ZXBsdXMtaHAuY29tghBzYWxlcy5odW1hbmEuY29tghN3a2RnY29tbS5odW1hbmEu
Y29tgiV3d3cuaHVtYW5hbWVtYmVyYXNzaXN0YW5jZXByb2dyYW0uY29tghp3d3cu
bWFya2V0cGxhY2UuaHVtYW5hLmNvbYIXd3d3LnNhaWEuaW5mb25vd3dlYi5jb20w
ggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4
cCUIFy+jqh0HE9MMAAABchiFSP4AAAQDAEgwRgIhAMcW9+Bi3kEYklFwntm8ILn5
DYeg9q0UbpVjurXKOc/BAiEAyGwtQYFO1X+a4IuMgKmnADBzyobQzatKJt13/UIL
CSAAdgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAXIYhUkNAAAE
AwBHMEUCIQDKT20gX6wngn9guadHiSrtoSz4JBAYPwSNowiWIBjhOgIgXBv2bth6
kfYgr5G68bFMeC6Mvd5aC/t0F3dIYg/LLGoAdQD2XJQv0XcwIhRUGAgwlFaO400T
GTO/3wwvIAvMTvFk4wAAAXIYhUkEAAAEAwBGMEQCIA4FwcfeZYjgE0WIl5RnJDQ+
aUBpV+nk/ZxUmpICLv5eAiBkqC6Y7HC6QgQG6EIC/DgIIJk9+OjOjjkgXeU+CAoZ
3DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwx
ay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRc
MFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUF
BzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYD
VR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFMQsfCNiqSiM
TRYfMrGltnEoebM8MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAEQDwO13
UZO7+pIIhvNDpnIPgGHEwzZjROp5wbVHpQuFC4J9wEki/A6XoGLiIU0MyLAYCPot
ov7RtNMjAldH3di2jfQgkC6dFlbYqwaErQE8fHVZ81hKq2Bj9VYSdGHw9X/e9Jtz
Ff0di6YbDKyWydfSJaLUTR7y6W+1FMKYFsJbT6iQsA285osHAH0ejQHb3bLTX3S0
9u6ZhTMBSkTTiGMZeTrA3vpEznwioYsc6tIyeltPdxOxHv+y8EdYKYhUhMtUxOKm
MmCXwSYBH7dZGxh4dv1cpfXYWZ6bE07obOIaHdRw/2yWxAZ4VRU5MCMgqkWg86k4
s02XJ9YTv4Cgzik=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh6PpnQoPG40FHjAta6b
ZiRFSaghj3xsQUZJryT4SxiJmxq0YKxkJMpfIYHIXJ4zKkASQK2CLXTKMbLrikIz
Ja5VLlNziWrZD5xXagH8zNeMKX5g5+ODFnkpYEHNaGATe0rOgfa5z4Pey/4xFL0A
eKCwdY5PQvDXAHO+kttDo/Q4xGL5ttaSUpaHYeA15Y3BFYdxdoiOZ/+uX2CWA3x5
0KzBoa9sU07cYX5g4usOr3Q6mNCs5KNquuBF6R3X64TXdhRaGlBxFGx7dgTp1vmr
S+xFCie0ScGq/ZK0MfMdm95Jqau1EmAGfBcV1eseJQ9DCkBVHnqxsvYzz/nxutDj
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281279756447844030650065245734338593870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 12:58:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-15 13:28:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kentucky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Humana Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HUM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.humanamarketpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24000348200221477741603969906418266497549900985352086210006633739024144575224894124987834708833050982963874215734741283250572469310642886146798919021554588980813259268690218220176447925195860519102052511132833562318905862666269064440112992334613104356219699280325043664072871566711922993325520889946394878911324496913758015856255554482334348975761002031158410886605061968370700491580556171969961012683601619737933345552480996087614756074851674102484400697277108117428148814250971030468497439166037075158647383306683076379009676742911796205009974850282356325127367045262443997873606293693630055459219537594775459914671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanamarketpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebi.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecaservices.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eir.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eir.humana-veterans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.onlinesecuremail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medcoaching.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moxie1.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moxie3.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moxie4.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthinformation.fromyourdoctorsoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pws.careplus-hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkdgcomm.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanamemberassistanceprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saia.infonowweb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c42c7c2362a9288c4d161f32b1a5b6712879b33c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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