minio.windtre.it

- Wind Tre S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 72:ac:1f:b9:ff:31:b8:d3:00:00:00:00:51:00:39:4d was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wind Tre S.p.A.

Organization: Wind Tre S.p.A.
State / Province: Milano
Locality: Rho
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 72:ac:1f:b9:ff:31:b8:d3:00:00:00:00:51:00:39:4d
Serial Number (int): 152425710070034965881126804334179268941
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f8:1c:7d:e9:44:ae:ea:14:9f:a5:bb:ad:dd:8a:66:0b:50:98:68:2d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7f:65:e6:58:a4:dc:d9:a3:96:db:32:27:69:f2:8e:bc:fd:55:87:98
Fingerprint (sha256): 36:bc:75:3c:5a:aa:6b:ce:7a:dd:10:74:17:c8:7c:7b:df:98:15:ab:f8:c0:75:25:79:c6:5f:96:f6:51:f4:51

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate minio.windtre.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minio.windtre.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

minio.windtre.it
www.minio.windtre.it

Other certificates including the domain name windtre.it

(limited to 100 certificates)
vcloud-rm.windcloud.wind.it
nog.windtre.it
app.windtre.it
appuntamentotecnico.windtre.it
withu.windtre.it
selfcare-ob-bs.apps.windtre.it
static.windtre.it
igp.aws.windtre.it
ologateway-test.windtre.it
cdn-magazine.windtre.it
vcloud-vmrc-rm.windcloud.wind.it
fibra-il-tuo-codice-pre.windtre.it
shopping.windtre.it
b2b.shop.windtre.it
vcloud-mi.windcloud.wind.it
apigw.windtre.it
registrazioneinternet.windtre.it
www.propostediristoro.windtre.it
skype-ext.windtre.it
cw3hubsec.windtre.it
shop.dea.windtre.it
withu.windtre.it
developer.windtre.it
newscms.windtre.it
areaclienti.windtre.it
vcloud-rm.windcloud.wind.it
windtre.it
gateway.shop.wind.it
visual.bs.windtre.it
apigw.windtre.it
fibra-richiedi-codice-professional-pre.windtre.it
attiva.windtre.it
apps.windtre.it
solplus.windtre.it
areaclienti.bs.windtre.it
cvse.windtre.it
www.propostedirimborso.windtre.it
selfcaring.windtre.it
www.windtre.it
fibra-dnsprofessional.windtre.it
clockin.windtre.it
erp-ocp.windtre.it
ilc.dms.windtre.it
www.windtre.it
myaccount.windtre.it
partners.windtre.it
sharepoint.windtre.it
fibra-il-tuo-codice-professional-pre.windtre.it
conversation.windtre.it
api.windtre.it
apigateway-selfcare.apps.windtre.it
travelweb.windtre.it
vse.windtre.it
dea.windtre.it
api.shop.windtre.it
devmagazine.windtre.it
ml-in-2.apps.windtre.it
myaccount.windtre.it
cma-pega-sit.windtre.it
shop.windtre.it
visual.windtre.it
vcse1new.windtre.it
clockin.windtre.it
pre-dea.windtre.it
gateway.shop.wind.it
apigw-ob-dev.apps.windtre.it
mail-rewarding.windtre.it
magazine.windtre.it
controllerlab.epc.windtre.it
agenda.windtre.it
SEC-SDV-SFE-DMZ.WINDTRE.IT
consumer.windtre.it
pd.windtre.it
w3hub.windtre.it
attiva.dea.windtre.it
cma-pega.windtre.it
minio.windtre.it
vcloud-vmrc-mi.windcloud.wind.it
easysales.windtre.it
uat-identity.windtre.it
techystore.windtre.it
mnp.windtre.it
gateway.shop.windtre.it
internet.windtre.it
newscms.windtre.it
gateway.shop.windtre.it
FW-TestPlant-IDR.windtre.it
skype-ext.windtre.it
skype-ext.windtre.it
apigw-ob-bs.apps.windtre.it
smartdesk-api.windtre.it
buy.shop.windtre.it
hcm-test.windtre.it
ilq.dms.windtre.it
next.windtre.it
shiftplanner.windtre.it
selfcaring.windtre.it
devops-bot.windtre.it
fibra-dnsdinamico.windtre.it
selfcare-customer-care.gcp.windtre.it

Certificate

The complete raw certificate details for minio.windtre.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHxzCCBq+gAwIBAgIQcqwfuf8xuNMAAAAAUQA5TTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MDAzMDkxMTAwMzNaFw0yMTAzMDkxMTMwMzFaMGExCzAJBgNVBAYTAklUMQ8wDQYD
VQQIEwZNaWxhbm8xDDAKBgNVBAcTA1JobzEYMBYGA1UEChMPV2luZCBUcmUgUy5w
LkEuMRkwFwYDVQQDExBtaW5pby53aW5kdHJlLml0MIICIjANBgkqhkiG9w0BAQEF
AAOCAg8AMIICCgKCAgEApKFebTJrYdbeXMl0ofdiQ+5rzPdqPaQPVpwDXqTGZwes
AA+gH1rP/f1gry8/6jAYJ/UyAepDT7B6JjSFz/uwtgFo2JLblpaQJODoB8QB1sFs
oQoHlh/bMbY7IqOX8bVm3THyvbYiNu+DkC+hRGvBXddFS+TGAMnVl32/xFpMiM2T
2bBselVPU43r5tAEMw/9qplRXOcXbSSHZFLfWZdU1SzJeomJ1JDiHTf3UX014lhF
eIIwiMTNvLa5Fd53GTUINnARPkX53UzglamW+kH03V+HgqFSk9R00bLFLlhpTTFy
cTKCKf65ssj46cdxmxT1Gf2C9YYfCG5ULKgmwNlGZ4MBYpnr8Bndl4rwEKclJU4C
1nHIbLCibUcQA3GrgcsZofdP3WRhK8vfsZIT41RSj9AJBy33BdT9VbLjbekKpuqW
zpckKcEZN20kJl73zO+E1YueXOH5/qXiKaxVMuf+aDE5qS8yrSKDH5v48Mp7o2U+
Kpx32oEKUw+HJgDCoES4PAUbZC1+flQkAcn43xcxdSRCsfXJGbAQguWfYegtyGLc
JZS3ac33bsKNa4EKDl/vhf/vgNTxC23GDZQ1o3QqI3JCVQfZ8EUtYQ3/wblGGLij
YCyQAjTTHoXLkjqQyoRlMqJzJ0wllt0b85fvUmkbjCckmjEiJ64N7e00t8eK8GUC
AwEAAaOCAx8wggMbMDEGA1UdEQQqMCiCEG1pbmlvLndpbmR0cmUuaXSCFHd3dy5t
aW5pby53aW5kdHJlLml0MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgBVgdTC
FpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAXC/D5g6AAAEAwBHMEUCIDu1
K5KjitVu80G+nsIxEibLwrwJwU64X1SqrFL1UgCUAiEA+xjOPRkInE07cvKEhvKd
okI4ZlICeiE0DL2+9SAXRoIAdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/
XqCDDwAAAXC/D5h5AAAEAwBIMEYCIQDTUY0UPy31j4DqEAx6+Km9quPrtH/LuA8l
H3kovA3bSgIhAJLOe0GZrgndy/zQiAEhxpgvvNgIQgAbu6zRoy5UbuwRAHUApLkJ
kLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFwvw+YUwAABAMARjBEAiAR
TvhOFv9gmCjM0WqRQ3oLBqRVvqUPz7NQNAHs6L2UMgIgEKMRVjB7thwZ+oo5czJ0
ikzZFS4l910YCuXyhfUVROQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVu
dHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwB
AgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRy
dXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWst
Y2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0G
A1UdDgQWBBT4HH3pRK7qFJ+lu63dimYLUJhoLTAJBgNVHRMEAjAAMA0GCSqGSIb3
DQEBCwUAA4IBAQBrdDmbllucYKxUolBDiH1WGMZSpAbSQGTI7KYGrXBcG9wMuXEu
GSko/pJPzvp+mvDqkkg8Pd3DaLSyRSo2nSap5Rdy+bsXIZG6KT48V/DV7Go2XkcP
ibvkx1Y3zVPATlrf06p2Zxz3CJ5CsuiJDxm0mddfo6EoO3L49FiThhsCNgMmaZXl
7yv//jpDJ5eLAK+u45V+oP+Gdl7YCP00lsE46LgBqutEykT8Whma7i8G+lKulGBq
i2kDH0/QRjFYpCtSPrhTVsgUklp7hpCQjGXKqwCNzOaKKGyQ2HqNpfFti2k07ODC
Bn+kmSkCBRvgc2+IX8W+mGnTxPLlyVoAfNqW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152425710070034965881126804334179268941
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 11:00:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-09 11:30:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rho'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wind Tre S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minio.windtre.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671633218900669711384887548980448523009176210101787938320110884445404594578409883032531870651951112060715212137782148576387655941628050805767143945356821732390752235972893556097711286500363569576345851368781562071114896967715003291759173484213618088131151777795126606016819535119967460268882523941276726565127878269921853479466127550059001394397863080860292486060264196464249779346926295764825259371172383836876788501869534178048411250763991835344614349270648899952919213884460621033391507952512700062595160946427161587416510873657254089362496557720691509118829814553921850112734462195746331579095232021390096767412533300332053604911398528912008832618946148588854251266774515712266213792056453811179762917498916504784540132291480197112683796362444232193598900262328343135369604288969763054119872325506736350602732053740362340185245028799237820128237700899760087683944902471520348013455299085081275122550076287622945102565414715997800217026659272715831047018085892445179296035569010931138115187210409777373342589633856931928074736675022470172447387481788147275517440277414397651415421569620174488995041787874449414298524493363459498222327595718896069046210755977032636182561297112590183557924051073062574718439533464693559937215426661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minio.windtre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minio.windtre.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f81c7de944aeea149fa5bbaddd8a660b5098682d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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