exwye-01.eib.org
- European Investment Bank -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 4e:1b:79:fa:2a:4c:a6:db:87:b3:a3:c6:5a:22:3a:74 was issued on by Entrust, Inc..
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
European Investment Bank
Organization:
European Investment Bank
Locality:
Luxembourg
Country: LU
Country: LU
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 4e:1b:79:fa:2a:4c:a6:db:87:b3:a3:c6:5a:22:3a:74Serial Number (int): 103822449678097585587911622601627286132
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 89:a7:33:d1:d1:7a:e8:05:5f:b2:30:08:df:6c:0f:57:52:a0:22:7c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 27:de:3d:18:d5:ba:66:09:48:61:c9:06:39:46:ad:94:bf:84:72:c0
Fingerprint (sha256): 38:d9:8d:ac:20:5e:b2:e0:58:aa:9b:43:3d:47:5b:8e:8f:33:bd:a0:63:81:7c:25:5c:85:e4:49:b3:fa:0b:0e
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate exwye-01.eib.org
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for exwye-01.eib.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
exwye-01.eib.org
exwye.eib.org
exwye-04.eib.org
exwye-03.eib.org
exwye-02.eib.org
join.eib.org
vc.eib.org
exwye.eib.org
exwye-04.eib.org
exwye-03.eib.org
exwye-02.eib.org
join.eib.org
vc.eib.org
Other certificates including the domain name eib.org
(limited to 100 certificates)
*.api.greengateway.eib.org
sip.eib.org
sip.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
pf4ee.eib.org
multisite.adelphi.de
my.eib.org
sip2.eib.org
www.eib.org
eib.org
*.eib.org
institute.eib.org
*.eib.org
my.eib.org
multisite.adelphi.de
www.eib.org
sip2.eib.org
www.eif.org
*.eib.org
sip.eib.org
multisite.adelphi.de
remote-uat.eib.org
*.eib.org
sts.eib.org
*.lux.eib.org
multisite.adelphi.de
advisory.eib.org
multisite.adelphi.de
*.eib.org
ews.test.eib.org
sts.eib.org
*.eib.org
*.eib.org
mdmcore-dev.eib.org
*.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
trad.eib.org
greengateway.eib.org
*.eib.org
lsweb-ext2.eib.org
lsweb-ext.eib.org
greenchecker.eib.org
*.greenchecker.eib.org
erecruitment.eib.org
privateeibforum.eib.org
sip.eib.org
apim-configuration-management-dev.eib.org
institute.eib.org
cwtest.eib.org
inmx.dev.eib.org
*.EIB.ORG
privateeibforum.eib.org
multisite.adelphi.de
multisite.adelphi.de
*.eib.org
institute.eib.org
*.eib.org
NetAccess.eib.org
ews.dev.eib.org
events.advisory.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
mail.dev.eib.org
advisory.eib.org
multisite.adelphi.de
edge.eib.org
multisite.adelphi.de
sip2.eib.org
pf4ee.eib.org
*.beilux.eib.org
vcs.eib.org
pf4ee.eib.org
www.eif.org
mdmcore-uat.eib.org
helpdesk.greengateway.eib.org
sbc-01.eib.org
sip.eib.org
trad.eib.org
lsweb-ext2.eib.org
sts.eib.org
institute.eib.org
*.eib.org
*.eib.org
www.eib.org
pf4ee.eib.org
mdmsas-dev.eib.org
ews.dev.eib.org
*.eib.org
mdms-dev2.dev.aws.eib.org
pf4ee-webcheck.eib.org
remote.eib.org
sts.eib.org
www.eib.org
advisory.eib.org
sip.eib.org
sip.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
pf4ee.eib.org
multisite.adelphi.de
my.eib.org
sip2.eib.org
www.eib.org
eib.org
*.eib.org
institute.eib.org
*.eib.org
my.eib.org
multisite.adelphi.de
www.eib.org
sip2.eib.org
www.eif.org
*.eib.org
sip.eib.org
multisite.adelphi.de
remote-uat.eib.org
*.eib.org
sts.eib.org
*.lux.eib.org
multisite.adelphi.de
advisory.eib.org
multisite.adelphi.de
*.eib.org
ews.test.eib.org
sts.eib.org
*.eib.org
*.eib.org
mdmcore-dev.eib.org
*.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
trad.eib.org
greengateway.eib.org
*.eib.org
lsweb-ext2.eib.org
lsweb-ext.eib.org
greenchecker.eib.org
*.greenchecker.eib.org
erecruitment.eib.org
privateeibforum.eib.org
sip.eib.org
apim-configuration-management-dev.eib.org
institute.eib.org
cwtest.eib.org
inmx.dev.eib.org
*.EIB.ORG
privateeibforum.eib.org
multisite.adelphi.de
multisite.adelphi.de
*.eib.org
institute.eib.org
*.eib.org
NetAccess.eib.org
ews.dev.eib.org
events.advisory.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
mail.dev.eib.org
advisory.eib.org
multisite.adelphi.de
edge.eib.org
multisite.adelphi.de
sip2.eib.org
pf4ee.eib.org
*.beilux.eib.org
vcs.eib.org
pf4ee.eib.org
www.eif.org
mdmcore-uat.eib.org
helpdesk.greengateway.eib.org
sbc-01.eib.org
sip.eib.org
trad.eib.org
lsweb-ext2.eib.org
sts.eib.org
institute.eib.org
*.eib.org
*.eib.org
www.eib.org
pf4ee.eib.org
mdmsas-dev.eib.org
ews.dev.eib.org
*.eib.org
mdms-dev2.dev.aws.eib.org
pf4ee-webcheck.eib.org
remote.eib.org
sts.eib.org
www.eib.org
advisory.eib.org
Certificate
The complete raw certificate details for exwye-01.eib.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH2jCCBsKgAwIBAgIQTht5+ipMptuHs6PGWiI6dDANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDAzMTIxMzU2MjBaFw0yNTAzMTIxMzU2MTlaMGAxCzAJBgNVBAYTAkxVMRMwEQYD VQQHEwpMdXhlbWJvdXJnMSEwHwYDVQQKExhFdXJvcGVhbiBJbnZlc3RtZW50IEJh bmsxGTAXBgNVBAMTEGV4d3llLTAxLmVpYi5vcmcwggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQCl+C132sK/B+v46j4I8p50++qsHhFrTw2Djy6mt5SOYLLg +Rz7J4xnTAeg8Ps5DUBH0BNSXaIdkYE+pjHCh1pqet0TwisFQxPsTKf5zmq0Gpaq QAnA5A/LUCQL9dWRQE9sD/4sm2ILY7O97U1+0AVT3QhZ1nU0ZC5QJh20m9qUmQFG 1h9W5gcNvNh0edggGl4BLWERaSlA9HVbMOehI0wwyN/wyp9CuLet1jn3R6InyAFc 1DG0kUv1w0Tjce0Mjln9GlXAO7KKp3uEA8RO6GTcYQY7z0LzEgNp7JohhGaDG2ad o44tJkfztX4bSgRGh5YzPL2Scf4p6YvxlWOyLoPVebgIEwh2/6zCTIz5XYZe84PW 8dxYb6YJFu3/sJcXkUf6S+AA91pLS+HBxZSunF9UuiOrG1DlMEZAyEP3GlyJl67q uGh0b0p97nL2/ARBkxBqTgeU7LtwueowgyJDzjgfKNODEczDnHbwP5ItfyDIvr3f ZrFsYbr6kgBhOLFs/QFQv0VdFgzOpS6SJUVM9K5OZJXK/vhudgTEkG9RjayytcQO KJdQfPUHhH/ZWZMBGjsaCtr5+s6XsbqEWTlZ06Dg2wPPGeQsediVgSXjR4tzAk/e vyAje+5rZZRD8vGEFnzI3oY3RNE7gYByIA8/FPTHEgt7/ZuGzlT41p52XjABlQID AQABo4IDMzCCAy8wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUiacz0dF66AVfsjAI 32wPV1KgInwwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYB BQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAz BggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYu Y2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2 ZWwxay5jcmwwegYDVR0RBHMwcYIQZXh3eWUtMDEuZWliLm9yZ4INZXh3eWUuZWli Lm9yZ4IQZXh3eWUtMDQuZWliLm9yZ4IQZXh3eWUtMDMuZWliLm9yZ4IQZXh3eWUt MDIuZWliLm9yZ4IMam9pbi5laWIub3Jnggp2Yy5laWIub3JnMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gBAwwCjAI BgZngQwBAgIwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AKLjCuRF772tm344 7Udnd1PXgluElNcrXhssxLlQpEfnAAABjjLzK20AAAQDAEYwRAIgO4L1oWxac8zz h9etwJve43VYKwOnZR+6MCah6Y3f3AUCIHzcnrf7gV+uSBp4bVWcKctMfyMd1c0m gKnTA1I+QLZnAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGO MvMregAABAMARzBFAiEA2ngBgGzHjOf4SuulZRrBjUDNBBG6NSDwkRs+xZ2sNWMC IHdM978nVudCTfihpJoFeMkciGTJbiIBAd+INKpWwx41AHcA5tIxY0B3jMEQQQbX cbnOwdJA9paEhvu6hzId/R43jlAAAAGOMvMrmQAABAMASDBGAiEAqvuJb5xTR4ZY zuC0JpY9Tm7AahIqCEFh/BZCIF61oB0CIQDHupMMirO9vpnStWUQC2kYIRk9qwVa olZQZCs8N5RPwjANBgkqhkiG9w0BAQsFAAOCAQEAlm/Ghe+26hRZA9WkmieXO+vo x7YmFR8dYUd8aHpzqkUf9q/DroEY9QLDapqcr7ay9fir6EOoxQNQNBPDXg+xAy2Q KyeabRyvshxOIi+ChWmN4TfGBGqVeii5yx3Vk/bJuXVsuglzogzXFQl2i5fvKuk0 dMSk0nFAjs6KIlWp4fQW+/bQ+gyf+sr06BmpBhfp8e4Bz7RPS9Y6N2rtfIwPueC0 Txt52S7madzIKocfHXTQ0Um2PIcaRL02H0OIYtmA7UqnlobMVN/8hHWjDHVBTs5s fpWHWQ3Td96TpmjowbJ54HixXsDj+CDXOw/GJTo1oddbGGPrkJYhfL0NukM9sg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApfgtd9rCvwfr+Oo+CPKe dPvqrB4Ra08Ng48upreUjmCy4Pkc+yeMZ0wHoPD7OQ1AR9ATUl2iHZGBPqYxwoda anrdE8IrBUMT7Eyn+c5qtBqWqkAJwOQPy1AkC/XVkUBPbA/+LJtiC2Ozve1NftAF U90IWdZ1NGQuUCYdtJvalJkBRtYfVuYHDbzYdHnYIBpeAS1hEWkpQPR1WzDnoSNM MMjf8MqfQri3rdY590eiJ8gBXNQxtJFL9cNE43HtDI5Z/RpVwDuyiqd7hAPETuhk 3GEGO89C8xIDaeyaIYRmgxtmnaOOLSZH87V+G0oERoeWMzy9knH+KemL8ZVjsi6D 1Xm4CBMIdv+swkyM+V2GXvOD1vHcWG+mCRbt/7CXF5FH+kvgAPdaS0vhwcWUrpxf VLojqxtQ5TBGQMhD9xpciZeu6rhodG9Kfe5y9vwEQZMQak4HlOy7cLnqMIMiQ844 HyjTgxHMw5x28D+SLX8gyL6932axbGG6+pIAYTixbP0BUL9FXRYMzqUukiVFTPSu TmSVyv74bnYExJBvUY2ssrXEDiiXUHz1B4R/2VmTARo7Ggra+frOl7G6hFk5WdOg 4NsDzxnkLHnYlYEl40eLcwJP3r8gI3vua2WUQ/LxhBZ8yN6GN0TRO4GAciAPPxT0 xxILe/2bhs5U+Naedl4wAZUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 103822449678097585587911622601627286132 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 13:56:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-12 13:56:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Investment Bank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exwye-01.eib.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677096256828004162997258004535975631551319238846221017706799924731943738395583083073789895271780887573518588766440940049688513259875554996765916907893963997310941246505919304577266812668520643054953461321609180603914044194228237452233770944738227868095272058678413548223607945599110863049987102728446148709970944305686313630562675095954767871552655547332395415021417648602626303728714241471528232563982606145706457733468875676050857747518020778658592994908408069329252061287534202079649250080922743497241442520181240808342418728022072799860925603129020842657863173834680099288591200097337910916899172571363351345419595951549536726983588421289900709614911465396719064908042512855653849897336558300950919874142215737331911138237258449591245494841151220436133196332223651281133084995461957862036324306624348291395983623021571410342798652526648609938530285621208688946486127698853156759725224664042725056576320611596650720745248936935034019848287485822315811949241255849643020790122842876521860945451294865914010312197859382956493022324641263693874176394615272871574654748960843248101881284826145144143385693015336963284946782226327160776785724130703958812474635287640753418307253473015277450762404546034756230000122818977690326316089749 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 89a733d1d17ae8055fb23008df6c0f5752a0227c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-01.eib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye.eib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-04.eib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-03.eib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-02.eib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.eib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.eib.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00966fc685efb6ea145903d5a49a27973bebe8c7b626151f1d61477c687a73aa451ff6afc3ae8118f502c36a9a9cafb6b2f5f8abe843a8c503503413c35e0fb1032d902b279a6d1cafb21c4e222f8285698de137c6046a957a28b9cb1dd593f6c9b9756cba0973a20cd71509768b97ef2ae93474c4a4d271408ece8a2255a9e1f416fbf6d0fa0c9ffacaf4e819a90617e9f1ee01cfb44f4bd63a376aed7c8c0fb9e0b44f1b79d92ee669dcc82a871f1d74d0d149b63c871a44bd361f438862d980ed4aa79686cc54dffc8475a30c75414ece6c7e9587590dd377de93a668e8c1b279e078b15ec0e3f820d73b0fc6253a35a1d75b1863eb9096217cbd0dba433db2