cndevice.cn.ca
- Canadian National Railway Company -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number b7:36:45:da:eb:21:73:ae:00:00:00:00:50:ee:be:f8 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Canadian National Railway Company
Organization:
Canadian National Railway Company
State / Province:
Quebec
Locality: Montreal
Country: CA
Locality: Montreal
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): b7:36:45:da:eb:21:73:ae:00:00:00:00:50:ee:be:f8Serial Number (int): 243530524089771983650164559335109082872
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: d2:d4:b5:9d:d3:17:bd:44:3b:d8:eb:8e:24:75:32:24:c6:e5:a2:02
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): f2:44:b5:24:31:a2:98:35:65:d5:61:d9:1b:ea:d1:6f:e6:ed:70:f3
Fingerprint (sha256): 3c:c7:9d:d4:1b:9f:31:fb:22:63:27:53:73:31:56:ec:35:0a:24:d8:e6:b2:8a:8b:c8:d3:e8:0e:fc:76:ca:c2
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate cndevice.cn.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cndevice.cn.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cndevice.cn.ca
cndeviceadmin.cn.ca
cndeviceadmin.cn.ca
Other certificates including the domain name cn.ca
(limited to 100 certificates)
soagwstg.cn.ca
mqmrsprda.cn.ca
akamai-san35.exacttarget.com
srv.tgbo-fb-qat.web.cn.ca
mft.cn.ca
printeron.cn.ca
ceros4.map.fastly.net
mft.cn.ca
soagwdev.cn.ca
automate.cn.ca
bravo.partners.cn.ca
ceros4.map.fastly.net
mfttest.cn.ca
ecprod.cn.ca
qcomp.cn.ca
ecprod.cn.ca
view.e.cn.ca
cncmg01prd.cn.ca
automate.cn.ca
ceros4.map.fastly.net
bravo.partners.cn.ca
*.exp.gumgum.com
sra.cn.ca
srv.demoapp1.web.cn.ca
ceros4.map.fastly.net
wifianchors.cn.ca
www.cn.ca
akamai-san35.exacttarget.com
ecprod.cn.ca
cnconnect.cn.ca
click.e.cn.ca
activ8.partners.cn.ca
devportal.partners.cn.ca
mail.cn.ca
akamai-san35.exacttarget.com
api-sbx.cn.ca
ceros4.map.fastly.net
fs-ppd.cn.ca
cnmail.cn.ca
akamai-san35.exacttarget.com
mqttdev.cn.ca
ecprodfast.cn.ca
developer.app.cn.ca
vdesktop.cn.ca
sra.cn.ca
akamai-san35.exacttarget.com
mydevice.cn.ca
*.exp.gumgum.com
sra.cn.ca
devportal.partners.cn.ca
ceros4.map.fastly.net
*.exp.gumgum.com
srv.cec-fb-dev.web.cn.ca
virtualoffice.cn.ca
ceros4.map.fastly.net
soagw.cn.ca
theresumeofjesus.one
ceros4.map.fastly.net
cndevice-uag.cn.ca
view.e.cn.ca
mfttest.cn.ca
srv.opscal-fb-qat.web.cn.ca
akamai-san35.exacttarget.com
fsbp-dev.cn.ca
developer.cn.ca
cnplus.cn.ca
ceros4.map.fastly.net
soagw.cn.ca
bravo.partners.cn.ca
ceros4.map.fastly.net
mydevice.cn.ca
srv.naas-fb-qat.web.cn.ca
mft.cn.ca
cndevice.cn.ca
ecprodfast.cn.ca
ceros4.map.fastly.net
*.exp.gumgum.com
srv.demoapp1-dev.web.cn.ca
qcomp.cn.ca
srv.ebill-fb-dev.web.cn.ca
ceros4.map.fastly.net
srv.opscal-fb-dev.web.cn.ca
ecprod.cn.ca
fs-ppd.cn.ca
ceros4.map.fastly.net
ceros4.map.fastly.net
ceros4.map.fastly.net
akamai-san35.exacttarget.com
myfms.cn.ca
mqmrsstga.cn.ca
bravo.partners.cn.ca
mfttest.cn.ca
mftrnd.cn.ca
ceros4.map.fastly.net
mft.cn.ca
mqmrsuata.cn.ca
sra.cn.ca
mqmrsstga.cn.ca
sra.cn.ca
www.cn.ca
mqmrsprda.cn.ca
akamai-san35.exacttarget.com
srv.tgbo-fb-qat.web.cn.ca
mft.cn.ca
printeron.cn.ca
ceros4.map.fastly.net
mft.cn.ca
soagwdev.cn.ca
automate.cn.ca
bravo.partners.cn.ca
ceros4.map.fastly.net
mfttest.cn.ca
ecprod.cn.ca
qcomp.cn.ca
ecprod.cn.ca
view.e.cn.ca
cncmg01prd.cn.ca
automate.cn.ca
ceros4.map.fastly.net
bravo.partners.cn.ca
*.exp.gumgum.com
sra.cn.ca
srv.demoapp1.web.cn.ca
ceros4.map.fastly.net
wifianchors.cn.ca
www.cn.ca
akamai-san35.exacttarget.com
ecprod.cn.ca
cnconnect.cn.ca
click.e.cn.ca
activ8.partners.cn.ca
devportal.partners.cn.ca
mail.cn.ca
akamai-san35.exacttarget.com
api-sbx.cn.ca
ceros4.map.fastly.net
fs-ppd.cn.ca
cnmail.cn.ca
akamai-san35.exacttarget.com
mqttdev.cn.ca
ecprodfast.cn.ca
developer.app.cn.ca
vdesktop.cn.ca
sra.cn.ca
akamai-san35.exacttarget.com
mydevice.cn.ca
*.exp.gumgum.com
sra.cn.ca
devportal.partners.cn.ca
ceros4.map.fastly.net
*.exp.gumgum.com
srv.cec-fb-dev.web.cn.ca
virtualoffice.cn.ca
ceros4.map.fastly.net
soagw.cn.ca
theresumeofjesus.one
ceros4.map.fastly.net
cndevice-uag.cn.ca
view.e.cn.ca
mfttest.cn.ca
srv.opscal-fb-qat.web.cn.ca
akamai-san35.exacttarget.com
fsbp-dev.cn.ca
developer.cn.ca
cnplus.cn.ca
ceros4.map.fastly.net
soagw.cn.ca
bravo.partners.cn.ca
ceros4.map.fastly.net
mydevice.cn.ca
srv.naas-fb-qat.web.cn.ca
mft.cn.ca
cndevice.cn.ca
ecprodfast.cn.ca
ceros4.map.fastly.net
*.exp.gumgum.com
srv.demoapp1-dev.web.cn.ca
qcomp.cn.ca
srv.ebill-fb-dev.web.cn.ca
ceros4.map.fastly.net
srv.opscal-fb-dev.web.cn.ca
ecprod.cn.ca
fs-ppd.cn.ca
ceros4.map.fastly.net
ceros4.map.fastly.net
ceros4.map.fastly.net
akamai-san35.exacttarget.com
myfms.cn.ca
mqmrsstga.cn.ca
bravo.partners.cn.ca
mfttest.cn.ca
mftrnd.cn.ca
ceros4.map.fastly.net
mft.cn.ca
mqmrsuata.cn.ca
sra.cn.ca
mqmrsstga.cn.ca
sra.cn.ca
www.cn.ca
Certificate
The complete raw certificate details for cndevice.cn.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIRALc2RdrrIXOuAAAAAFDuvvgwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkwMzExMjAyNzQyWhcNMjEwNjEwMjA1NzQxWjB2MQswCQYDVQQGEwJDQTEPMA0G A1UECBMGUXVlYmVjMREwDwYDVQQHEwhNb250cmVhbDEqMCgGA1UEChMhQ2FuYWRp YW4gTmF0aW9uYWwgUmFpbHdheSBDb21wYW55MRcwFQYDVQQDEw5jbmRldmljZS5j bi5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANn3IFlDdbh032vW Qh+pmU4e9FKCez36sDiTEgCcrLo4tQg5Go85EbWSnVBYhJDv+drPNJc8f2robe/r uM3pKHsTgM7G/drMm24vbgKF00lcc8uSyIf+EQJnTOj/bNCa/E8JT5TjLeR7Rf/+ 4NV98PYDUq8E1q1qAkPdnH08BEL5IaG3y5wEGH9EprG0KXmEgbiPkyEHB1v/leq0 +Wg19MuOTObtCpJpfv1Ehm18+i3BaVFPxQKdhgLcB4MxDRkAlIpVObGdryslCtGD yvu2BmerIr4xP7zk/NE7jkVEyD+N5Rlvpl4xvrsNvc8Gp/zFyFmKumrO0mnG5qiM Zf6T4J0CAwEAAaOCA5UwggORMC4GA1UdEQQnMCWCDmNuZGV2aWNlLmNuLmNhghNj bmRldmljZWFkbWluLmNuLmNhMIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdwBV gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWlujAKKAAAEAwBIMEYC IQDGiWF9pYQ95GpFkiW9aJK1h8HuZlhosPeLaG4KXnDNNgIhAK8Vv0ZFjH8pzAJX lRVs4ri34Et8lYYEkSvt7P01Qoc1AHYARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1 P9MzlrW2gagAAAFpbowClAAABAMARzBFAiEAjS8ZB4sGsJT6UbjTAwEMAmQzupWT 8UnZo8rrL8WZd50CIFd9PenL3ljvvXiPgIytaZQ351bmJO13kfeEU0TDJJe+AHYA b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFpbowDkQAABAMARzBF AiEA5IyHqNQPRZxrou7XFJx4yFlzzvvtMf0Y/bS6/4zxo0ECIARoc77boWz6yfCH 1Ca0ZB6ZncDukKhzAn+zZMcZ5puCAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4 43fNDsgN3BAAAAFpbowCmgAABAMARzBFAiEAisM46r558/glzaAgY35aHPFYlruS jMbWqkELW9VvC0ICIFU37MlsGgpQoN2SdZ5J5iHhBO7ab0IetU9PS558+Ks7MA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYD VR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNy bDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDov L3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAj BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKG J2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSME GDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQU0tS1ndMXvUQ72OuO JHUyJMblogIwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAfT2AaUxsnZCQ eYteKeq7k+wTTBFFBpsAa/LmFJUDbSj2K7afEDX7WgdqchswUpqnRPiv/PiK25pm 7Uu9nJXWNA4ZXURsfz8WI4LVq+Z2W1KifrI5Yz45XWNg2GsIYOubRXd5u1+lgMc1 Y53Eknykc5MumkeDZjwPo04cvfc82Wa1qS8aRFm5Km3wn6s815Kyu3/Rz6iQRlv2 X7o0CvoRGgwXmWLyRXgI41Xgn0XNvtw84AkTcJUzVUHbkIm3RdodZY8H7p/ymNPb OoNamISDfx9j12l3AgppX2o5DcK9MWdEdA/MPn4CxNov9rFbZiLvfaXmsbhmabf/ k/BHPdbCiA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fcgWUN1uHTfa9ZCH6mZ Th70UoJ7PfqwOJMSAJysuji1CDkajzkRtZKdUFiEkO/52s80lzx/auht7+u4zeko exOAzsb92sybbi9uAoXTSVxzy5LIh/4RAmdM6P9s0Jr8TwlPlOMt5HtF//7g1X3w 9gNSrwTWrWoCQ92cfTwEQvkhobfLnAQYf0SmsbQpeYSBuI+TIQcHW/+V6rT5aDX0 y45M5u0Kkml+/USGbXz6LcFpUU/FAp2GAtwHgzENGQCUilU5sZ2vKyUK0YPK+7YG Z6sivjE/vOT80TuORUTIP43lGW+mXjG+uw29zwan/MXIWYq6as7SacbmqIxl/pPg nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 243530524089771983650164559335109082872 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 20:27:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-10 20:57:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreal' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian National Railway Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cndevice.cn.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27515574728642602873593256324453035475166584146385694630531549727770736882173840855789533888770134150984620400851276757042142163266699787162333544216068181899720937436519838257943620997868723586162522092935889746675348952964444807926302399670114008242185047328400243329089363138052127713939328109391182407615193214034493948391627907558038594411878183243392824728947270236402685696756277405354843175619350841523915732927011493117373247745406436226642737110208626225203622147257545492465691626535392224897634189005417481927150012182860097456696402308353978486770500143257022782299380127264708924100315489391669155192989 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cndevice.cn.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cndeviceadmin.cn.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d2d4b59dd317bd443bd8eb8e24753224c6e5a202 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007d3d80694c6c9d9090798b5e29eabb93ec134c1145069b006bf2e61495036d28f62bb69f1035fb5a076a721b30529aa744f8affcf88adb9a66ed4bbd9c95d6340e195d446c7f3f162382d5abe6765b52a27eb239633e395d6360d86b0860eb9b457779bb5fa580c735639dc4927ca473932e9a4783663c0fa34e1cbdf73cd966b5a92f1a4459b92a6df09fab3cd792b2bb7fd1cfa890465bf65fba340afa111a0c179962f2457808e355e09f45cdbedc3ce009137095335541db9089b745da1d658f07ee9ff298d3db3a835a9884837f1f63d76977020a695f6a390dc2bd316744740fcc3e7e02c4da2ff6b15b6622ef7da5e6b1b86669b7ff93f0473dd6c288