webmail.aramark.com
- ARAMARK -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 50:d2:07:f7 was issued on by Entrust, Inc..
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
ARAMARK
Organization:
ARAMARK
State / Province:
Pennsylvania
Locality: Philadelphia
Country: US
Locality: Philadelphia
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 50:d2:07:f7Serial Number (int): 1355941879
Serial Number lenght: 31 bits, 4 octets
SubjectKeyId: 54:7b:c9:f0:61:dc:c3:a4:57:0e:a9:a4:4f:96:ec:57:4e:b7:71:38
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 6d:fd:dd:76:96:17:1d:a6:fd:38:dc:67:c5:b9:ed:73:37:9c:9a:1f
Fingerprint (sha256): 3e:86:1b:f4:ba:58:01:02:1d:b5:6d:f6:5d:dd:22:13:e8:27:77:5a:aa:9c:4f:0d:3f:35:a6:70:39:4e:d8:bd
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate webmail.aramark.com
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webmail.aramark.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webmail.aramark.com
LEGACY.ARAMARK.COM
IMAP.ARAMARK.COM
AUTODISCOVER.ARAMARK.COM
UM.ARAMARK.COM
AUTODISCOVER.ARAMARK.CA
OA.ARAMARK.COM
USPHL0EXC2C.FSS.ARAMARK.COM
EAS.ARAMARK.COM
USPHL0EXC2B.FSS.ARAMARK.COM
AUTODISCOVER.ARAMARKTEST.COM
USPHL0EXC2D.FSS.ARAMARK.COM
AUTODISCOVER.1st-fresh.com
USPHL0EXC2A.FSS.ARAMARK.COM
AUTODISCOVER.ARAMARK.COM.MX
LEGACY.ARAMARK.COM
IMAP.ARAMARK.COM
AUTODISCOVER.ARAMARK.COM
UM.ARAMARK.COM
AUTODISCOVER.ARAMARK.CA
OA.ARAMARK.COM
USPHL0EXC2C.FSS.ARAMARK.COM
EAS.ARAMARK.COM
USPHL0EXC2B.FSS.ARAMARK.COM
AUTODISCOVER.ARAMARKTEST.COM
USPHL0EXC2D.FSS.ARAMARK.COM
AUTODISCOVER.1st-fresh.com
USPHL0EXC2A.FSS.ARAMARK.COM
AUTODISCOVER.ARAMARK.COM.MX
Other certificates including the domain name aramark.com
(limited to 100 certificates)
USNCCLTSON01.fss.aramark.com
myworkplace-ps.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
Printing.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
larry.aramark.com
webmail.aramark.com
USAZSCOSON02.fss.aramark.com
USPHL0DEFWA1.fss.aramark.com
Moe.aramark.com
USILDGSON02.fss.aramark.com
prdjsjpmc.aramark.com
USPHL0DEFWA1.fss.aramark.com
PHLSIP.aramarkuc.net
*.aramark.com
healthcareinsights.aramark.com
DGRsip.aramarkuc.net
USPA833SON02.fss.aramark.com
pam.fss.aramark.com
portalcontent.aramark.com
cribl.aramark.com
careers.aramark.com
usphl0pcpmwa1.fss.aramark.com
www.ps.aramark.com
usdal2sba01.fss.aramark.com
sip.aramark.com
usphl0asa2.fss.aramark.com
campusinsights.aramark.com
larry.aramark.com
larry.aramark.com
facilitiesinsights.aramark.com
lync01.fss.aramark.com
webmail.aramark.com
usphl0pgrfn1.fss.aramark.com
USPA833SON01.fss.aramark.com
workplaceinsights.aramark.com
pki.aramark.com
acctrecdev2.aramark.com
healthcareinsights.aramark.com
webmail.aramark.com
myportaladmin.aramark.com
USYOS1SMD01.FSS.ARAMARK.COM
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
guest-wifi.fss.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
campusinsights.aramark.com
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
azuredevops.aramark.com
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
workplaceinsights.aramark.com
admin.aramark.com
webmail.aramark.com
bonsecours.aramark.com
larry.aramark.com
www.ps.aramark.com
sccm2012eu.aramark.com
usphl0pgrfn1.fss.aramark.com
admin.aramark.com
careers.aramark.com
fwmanage.fss.aramark.com
webmail.aramark.com
cribl.aramark.com
workplaceinsights.aramark.com
usphx0son01.fss.aramark.com
aussharepoint.aramark.com
webmail.aramark.com
DGRsip.aramarkuc.net
www.ps.aramark.com
careers.aramark.com
www.ps.aramark.com
*.aramark.com
scan2pay.aramark.com
USILDGSON01.fss.aramark.com
DGRsip.aramarkuc.net
campusinsights.aramark.com
da.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
k12insights.aramark.com
usdal2son01.fss.aramark.com
phlsmtp.aramark.com
webmail.aramark.com
PHLSIP.aramarkuc.net
c3link.aramark.com
www.ps.aramark.com
*.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
facilitiesinsights.aramark.com
workplaceinsights.aramark.com
USPHL0PEFWA1.fss.aramark.com
webmail.aramark.com
admin.aramark.com
myportallogintest.aramark.com
myworkplace-ps.aramark.com
healthcareinsights.aramark.com
k12insights.aramark.com
DGRsip.aramarkuc.net
myworkplace-ps.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
Printing.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
larry.aramark.com
webmail.aramark.com
USAZSCOSON02.fss.aramark.com
USPHL0DEFWA1.fss.aramark.com
Moe.aramark.com
USILDGSON02.fss.aramark.com
prdjsjpmc.aramark.com
USPHL0DEFWA1.fss.aramark.com
PHLSIP.aramarkuc.net
*.aramark.com
healthcareinsights.aramark.com
DGRsip.aramarkuc.net
USPA833SON02.fss.aramark.com
pam.fss.aramark.com
portalcontent.aramark.com
cribl.aramark.com
careers.aramark.com
usphl0pcpmwa1.fss.aramark.com
www.ps.aramark.com
usdal2sba01.fss.aramark.com
sip.aramark.com
usphl0asa2.fss.aramark.com
campusinsights.aramark.com
larry.aramark.com
larry.aramark.com
facilitiesinsights.aramark.com
lync01.fss.aramark.com
webmail.aramark.com
usphl0pgrfn1.fss.aramark.com
USPA833SON01.fss.aramark.com
workplaceinsights.aramark.com
pki.aramark.com
acctrecdev2.aramark.com
healthcareinsights.aramark.com
webmail.aramark.com
myportaladmin.aramark.com
USYOS1SMD01.FSS.ARAMARK.COM
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
guest-wifi.fss.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
campusinsights.aramark.com
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
azuredevops.aramark.com
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
workplaceinsights.aramark.com
admin.aramark.com
webmail.aramark.com
bonsecours.aramark.com
larry.aramark.com
www.ps.aramark.com
sccm2012eu.aramark.com
usphl0pgrfn1.fss.aramark.com
admin.aramark.com
careers.aramark.com
fwmanage.fss.aramark.com
webmail.aramark.com
cribl.aramark.com
workplaceinsights.aramark.com
usphx0son01.fss.aramark.com
aussharepoint.aramark.com
webmail.aramark.com
DGRsip.aramarkuc.net
www.ps.aramark.com
careers.aramark.com
www.ps.aramark.com
*.aramark.com
scan2pay.aramark.com
USILDGSON01.fss.aramark.com
DGRsip.aramarkuc.net
campusinsights.aramark.com
da.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
k12insights.aramark.com
usdal2son01.fss.aramark.com
phlsmtp.aramark.com
webmail.aramark.com
PHLSIP.aramarkuc.net
c3link.aramark.com
www.ps.aramark.com
*.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
facilitiesinsights.aramark.com
workplaceinsights.aramark.com
USPHL0PEFWA1.fss.aramark.com
webmail.aramark.com
admin.aramark.com
myportallogintest.aramark.com
myworkplace-ps.aramark.com
healthcareinsights.aramark.com
k12insights.aramark.com
DGRsip.aramarkuc.net
Certificate
The complete raw certificate details for webmail.aramark.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIEUNIH9zANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNDEwMDIxMzM0MTRa Fw0xODExMTIwNjI1NDBaMGsxCzAJBgNVBAYTAlVTMRUwEwYDVQQIEwxQZW5uc3ls dmFuaWExFTATBgNVBAcTDFBoaWxhZGVscGhpYTEQMA4GA1UEChMHQVJBTUFSSzEc MBoGA1UEAxMTd2VibWFpbC5hcmFtYXJrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALblzJRZBEYysRdexrzkpr5Z1hNtKkiUIeSAqDgIBd6ppjY8 DpKjOGvrnxRiksyoWAX+7GnQS+NODQFGYb6arnBKKGEzIVda3uArLsrXwrHfntk7 UDHNihlvge+JGvk3AFq11RDPSBfRH61YJoH8CGeX2Lld9lgSt0q5U9nzLnXK67gx sQFsNVDRAURORiu0HxOe1EaoS8Gcewo30rHO0lpJ5IA3bxz68hSPq0sHWTi9cRaR rKh7YZA7tA6vzie9MEkbluj+ug4P7MQvgHAgSIWd+Z2GFe7oY+iV+yQ1n+dGTbjm 8ytn8mRdtAzU7j5AivNmIjAuvS1iNfPDf3+ijj0CAwEAAaOCAuIwggLeMAsGA1Ud DwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCww KjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNV HSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5l bnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEF BQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6 Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjCCAXcGA1UdEQSCAW4w ggFqghN3ZWJtYWlsLmFyYW1hcmsuY29tghJMRUdBQ1kuQVJBTUFSSy5DT02CEElN QVAuQVJBTUFSSy5DT02CGEFVVE9ESVNDT1ZFUi5BUkFNQVJLLkNPTYIOVU0uQVJB TUFSSy5DT02CF0FVVE9ESVNDT1ZFUi5BUkFNQVJLLkNBgg5PQS5BUkFNQVJLLkNP TYIbVVNQSEwwRVhDMkMuRlNTLkFSQU1BUksuQ09Ngg9FQVMuQVJBTUFSSy5DT02C G1VTUEhMMEVYQzJCLkZTUy5BUkFNQVJLLkNPTYIcQVVUT0RJU0NPVkVSLkFSQU1B UktURVNULkNPTYIbVVNQSEwwRVhDMkQuRlNTLkFSQU1BUksuQ09NghpBVVRPRElT Q09WRVIuMXN0LWZyZXNoLmNvbYIbVVNQSEwwRVhDMkEuRlNTLkFSQU1BUksuQ09N ghtBVVRPRElTQ09WRVIuQVJBTUFSSy5DT00uTVgwHwYDVR0jBBgwFoAUgqJwdN28 Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFFR7yfBh3MOkVw6ppE+W7FdOt3E4MAkG A1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBANLcLHTRq6j0e4QFQNeZKiTELRTT ehyRloB5zRFGe+xe15R//dHZQbbeNnyXE05usl50rvIEpsIPWTQljKAAKyXqlvwz LfEzojh4LWKSbFQ5FnDW1i0TwmjBpvpixyPnrIzJDy83DIC46P8P2ubgi0dobVj0 momCnQn2hRGwckTig5VS0Yt6dV6BAC6KZSi4c9T8ARTw/mscJfTQkJh3dn1EysS2 zFjyEmme4/cRyFHWuHVCxcl4XIQ3LzWEzaLS2I/oKRNxJ094ghTtAWTxCzWru7v1 PQ2wKMcoP0Rj2PqP4tUzpT2yjd4LrmTIgEX6Z6FrlUK+RDkDB9poMDLTyFY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuXMlFkERjKxF17GvOSm vlnWE20qSJQh5ICoOAgF3qmmNjwOkqM4a+ufFGKSzKhYBf7sadBL404NAUZhvpqu cEooYTMhV1re4CsuytfCsd+e2TtQMc2KGW+B74ka+TcAWrXVEM9IF9EfrVgmgfwI Z5fYuV32WBK3SrlT2fMudcrruDGxAWw1UNEBRE5GK7QfE57URqhLwZx7CjfSsc7S WknkgDdvHPryFI+rSwdZOL1xFpGsqHthkDu0Dq/OJ70wSRuW6P66Dg/sxC+AcCBI hZ35nYYV7uhj6JX7JDWf50ZNuObzK2fyZF20DNTuPkCK82YiMC69LWI188N/f6KO PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1355941879 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-02 13:34:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 06:25:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARAMARK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.aramark.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23088689682495935889991279768624767955706007944751511545630783417601748641462656533362603499308536993405683960086469696373417840888203013438645756247693709389066042962461249778805275559254671735913567361855348223178986163432914276564649222511379158346258433347244292272898454848266583759118833907519124918137202300468694802976982021902230055386972767526234181324429436213441263897635521184218638036492524568182499836690840843628595793649293113061120612781227036320596187987213367453809872528669977433454587916438682142682279589430086373026737752687767974836446562646189064582848531143519457802971121588105919103929917 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.aramark.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LEGACY.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'IMAP.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AUTODISCOVER.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UM.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AUTODISCOVER.ARAMARK.CA' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'OA.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USPHL0EXC2C.FSS.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EAS.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USPHL0EXC2B.FSS.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AUTODISCOVER.ARAMARKTEST.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USPHL0EXC2D.FSS.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AUTODISCOVER.1st-fresh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USPHL0EXC2A.FSS.ARAMARK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AUTODISCOVER.ARAMARK.COM.MX' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 547bc9f061dcc3a4570ea9a44f96ec574eb77138 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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