media-cast.shanghaidisneyresort.com.cn

- The Walt Disney Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 37:55:89:00:d0:74:8c:5e:1c:54:dd:23:75:7c:77:ab was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Walt Disney Company

Organization: The Walt Disney Company
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:55:89:00:d0:74:8c:5e:1c:54:dd:23:75:7c:77:ab
Serial Number (int): 73551663755775313942240676910347351979
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e0:69:4e:4c:63:47:a8:7e:6d:6d:d3:ab:f2:e3:e9:0a:06:d8:05:40
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a7:e0:c1:fc:fa:8e:c4:d3:d1:bd:47:32:ea:5e:65:8c:03:84:90:39
Fingerprint (sha256): 37:82:2c:73:d5:8a:cf:46:0a:ff:f0:0d:d5:91:2d:af:21:4f:6f:a1:f5:46:71:be:de:0a:a7:d0:5b:9e:1a:80

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate media-cast.shanghaidisneyresort.com.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media-cast.shanghaidisneyresort.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media-cast.shanghaidisneyresort.com.cn

Other certificates including the domain name shanghaidisneyresort.com.cn

(limited to 100 certificates)
VWMS.shanghaidisneyresort.com.cn
dmeeting.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
bbstudio.disney.com
ehskp-qa.shanghaidisneyresort.com.cn
printer-qa.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
shdrbuzz-lt.shanghaidisneyresort.com.cn
bsp.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
www.chinacache.com
www.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
dcs.shanghaidisneyresort.com.cn
d3security.shanghaidisneyresort.com.cn
d3security-qa-tmp.shanghaidisneyresort.com.cn
shdrltweb.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
wechatapi.shanghaidisneyresort.com.cn
media-cast.shanghaidisneyresort.com.cn
shdr-passportscan.shanghaidisneyresort.com.cn
shdrltweb.shanghaidisneyresort.com.cn
tenantsales.shanghaidisneyresort.com.cn
wmmobile81-qa.shanghaidisneyresort.com.cn
dmeeting.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
d3security-qa.shanghaidisneyresort.com.cn
www.chinacache.com
unveilthemagic.shanghaidisneyresort.com.cn
VWMS.shanghaidisneyresort.com.cn
customer-service-portal.shanghaidisneyresort.com.cn
shdrdevapi.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
shdrdevapi.shanghaidisneyresort.com.cn
SHDR-OWS-QA.starwave.com
shdrqaweb.shanghaidisneyresort.com.cn
wmmobile.shanghaidisneyresort.com.cn
TenantSales.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
latest.gw.fsts.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
shdr-sjlt-qa.shanghaidisneyresort.com.cn
media-cast.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
shdrbuzz-qa.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
bbstudio.disney.com
shdr-delphi.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
shdrdevweb.shanghaidisneyresort.com.cn
SHDR-OWS-QA.starwave.com
ehour.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
shdr-dam-qa.shanghaidisneyresort.com.cn
shdrbuzz-lt.shanghaidisneyresort.com.cn
www.chinacache.com
bsp.disney.com
sw88.shanghaidisneyresort.com.cn
www.chinacache.com
unveilthemagic.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
tenantsales-qa.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
bbstudio.disney.com
ehskp.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
shdr-dam-qa.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
ehskp-qa.shanghaidisneyresort.com.cn
tenantsales.shanghaidisneyresort.com.cn
www.chinacache.com
wmmobileq.shanghaidisneyresort.com.cn
ehour.shanghaidisneyresort.com.cn
shdr-delphi.shanghaidisneyresort.com.cn
view.shanghaidisneyresort.com.cn
SHDR-OWS-DEV.starwave.com
SHDR-OWS-DEV.starwave.com
SHDR-OWS.starwave.com
wmmobile.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
printer.shanghaidisneyresort.com.cn
bsp.disney.com
dhour.shanghaidisneyresort.com.cn
bsp.shanghaidisneyresort.com.cn
bsp.disney.com
printer.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
tsaservice.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
wmmobile.shanghaidisneyresort.com.cn
unveilthemagic.shanghaidisneyresort.com.cn
bluebeam.shanghaidisneyresort.com.cn

Certificate

The complete raw certificate details for media-cast.shanghaidisneyresort.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIQN1WJANB0jF4cVN0jdXx3qzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MTAxMjUxNTM0MzFaFw0yMjAyMjIxNTM0MzFaMIGHMQswCQYDVQQGEwJVUzETMBEG
A1UECBMKQ2FsaWZvcm5pYTEQMA4GA1UEBxMHQnVyYmFuazEgMB4GA1UEChMXVGhl
IFdhbHQgRGlzbmV5IENvbXBhbnkxLzAtBgNVBAMTJm1lZGlhLWNhc3Quc2hhbmdo
YWlkaXNuZXlyZXNvcnQuY29tLmNuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArNAmJcnefGzKQNxb6E/troMuEnjBpvJBEg9MJXGB58mY8L2FJ7bPXG1G
b4kjwb7c7wPSPs3AZYVtNV/sLE0LIs+oj9MPMN3Q9lQ1t0kAu5FqlijCFeUSnv4V
6vntx8TeFfa5DZ6bO517JaYBI5CyAgQ35W1Fn7d0Tnpa/He+UI1Tq38KXiVTKCWT
guDrfiaMfqojSE46gD8JMG1YhK6p0vQZa+hXtUX+w2F+y0Yj81wQ0Oj94s+Zb8Qa
bAimMilcb3eK0Zi5cKoCjPFSnZpx5bUdz7XOJYbUBJcnk8T4WThvWlllfBH4HEIZ
feWO8FFPdj3ZSRhjLE5s31lH5K/j2QIDAQABo4IBtjCCAbIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQU4GlOTGNHqH5tbdOr8uPpCgbYBUAwHwYDVR0jBBgwFoAUgqJw
dN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdo
dHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5l
bnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0
dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwMQYDVR0RBCowKIImbWVk
aWEtY2FzdC5zaGFuZ2hhaWRpc25leXJlc29ydC5jb20uY24wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBMBgNVHSAERTBDMDcG
CmCGSAGG+mwKAQUwKTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5u
ZXQvcnBhMAgGBmeBDAECAjATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAPV20Tz4m47xS0aW8HMxVfcJF6exOK0sqEpoux45wqVZoezHPOdSz
/J0cI9Kfh/oJJiBY5rhQ4gr748HE1cfFv1/6R+XWH1hFwJbpXoNBc8TWjdrdJd/C
9d3b2ywPhBud0BMlOQ8dFkEDpWLm/4Q86Ug011ZhS5qxDHD/14ZkuKlIGrNuQbIl
yBeJLmdbrALdxMyhappP2XkpMwoe7SPt507e/1KV+CBuVqCCQomy4wWGZbGIqQX2
1vLlZoDPoEFQUdiG+sgpkmD4RbVXKnT/k96rlbACnGoXO6aiOG2QOVd8InJhKHqe
QljxKFhVOuWQa0bvukeTCJyya2koLUIVWw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNAmJcnefGzKQNxb6E/t
roMuEnjBpvJBEg9MJXGB58mY8L2FJ7bPXG1Gb4kjwb7c7wPSPs3AZYVtNV/sLE0L
Is+oj9MPMN3Q9lQ1t0kAu5FqlijCFeUSnv4V6vntx8TeFfa5DZ6bO517JaYBI5Cy
AgQ35W1Fn7d0Tnpa/He+UI1Tq38KXiVTKCWTguDrfiaMfqojSE46gD8JMG1YhK6p
0vQZa+hXtUX+w2F+y0Yj81wQ0Oj94s+Zb8QabAimMilcb3eK0Zi5cKoCjPFSnZpx
5bUdz7XOJYbUBJcnk8T4WThvWlllfBH4HEIZfeWO8FFPdj3ZSRhjLE5s31lH5K/j
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73551663755775313942240676910347351979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-25 15:34:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-22 15:34:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Walt Disney Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media-cast.shanghaidisneyresort.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21815630558542125495416153548310586627959168346043221224371052919441839323473506597415737050684235557761931252851327659088560363128390604652611446264829798846309104906478859719932577097154332518745513274933649994237747300036181852274556827215739001087717575408372436422354950426548467549346931528188578973708195015194285791086195202990091264187393258539068405235250533874993519034195967325327849560829946457406079639712378968009693008512801339454352862431188794077342497169422276625301199421220216264117395124335926849330283578769387643622726900028992340455865560675299580509457124069940074474470443523043669975229401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0694e4c6347a87e6d6dd3abf2e3e90a06d80540
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-cast.shanghaidisneyresort.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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