campus.bankofamerica.com
- Bank of America Corporation -
Issued by Entrust Certification Authority - L1M
About this certificate
This digital certificate with serial number 7b:bb:e0:90:af:d9:33:10:00:00:00:00:54:cf:b3:4f was issued on by Entrust, Inc..
With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Bank of America Corporation
Company registration number:
2927442
Organization: Bank of America Corporation
Organization: Bank of America Corporation
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7b:bb:e0:90:af:d9:33:10:00:00:00:00:54:cf:b3:4fSerial Number (int): 164470557717119739919373341973093004111
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 7c:a5:c7:7c:a6:6e:87:24:b2:09:84:bb:ae:0b:15:ee:2f:ea:83:9c
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a
Fingerprint (sha1): a1:c7:22:88:28:8d:76:e3:4a:21:79:1b:58:0e:d0:be:63:70:c7:ff
Fingerprint (sha256): 3e:c7:47:3f:8c:1d:f5:f9:ef:f2:02:00:26:91:b3:f0:a4:a8:93:f4:9d:95:9e:af:79:00:60:cb:98:c6:26:44
Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1m.crl
Check the revocation status for certificate campus.bankofamerica.com
48
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for campus.bankofamerica.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
campus.bankofamerica.com
loans.bankofamerica.com
promo.bankofamerica.com
www.mlmyfuture.com
preferences.em.bankofamerica.com
preferences.em.fiacardservices.com
promotions.bankofamerica.com
ees.bankofamerica.com
getstarted.bankofamerica.com
campus-stg.bankofamerica.com
loans-stg.bankofamerica.com
promo-stg.bankofamerica.com
mlmyfuture-stg.fsqa.ml.com
preferences-stg.em.bankofamerica.com
preferences-stg.em.fiacardservices.com
promotions-stg.bankofamerica.com
ees-stg.bankofamerica.com
getstarted-stg.bankofamerica.com
ux.bankofamerica.com
ux-stg.bankofamerica.com
www.bamlinsights.com
www-stg.bamlinsights.com
bankatwork.bankofamerica.com
bankatwork-stg.bankofamerica.com
hrforum.bamlevents.com
hrforum-stg.bamlevents.com
healthaccounts.bankofamerica.com
healthaccounts-stg.bankofamerica.com
www.saveituseit.com
saveituseit-stg.fsqa.ml.com
utility.bankofamerica.com
utility-stg.bankofamerica.com
personalize.bankofamerica.com
personalize-stg.bankofamerica.com
ba.ml.com
rg.ml.com
ba-stg.fsqa.ml.com
rg-stg.fsqa.ml.com
www.bamlevents.com
www.bamlclientconf.com
www.premieradvisorconf.com
www.gicadvisorconf.com
www.bamlrbcevent.com
bamlevents-stg.fsqa.ml.com
bamlclientconf-stg.fsqa.ml.com
premieradvisorconf-stg.fsqa.ml.com
gicadvisorconf-stg.fsqa.ml.com
bamlrbcevent-stg.fsqa.ml.com
loans.bankofamerica.com
promo.bankofamerica.com
www.mlmyfuture.com
preferences.em.bankofamerica.com
preferences.em.fiacardservices.com
promotions.bankofamerica.com
ees.bankofamerica.com
getstarted.bankofamerica.com
campus-stg.bankofamerica.com
loans-stg.bankofamerica.com
promo-stg.bankofamerica.com
mlmyfuture-stg.fsqa.ml.com
preferences-stg.em.bankofamerica.com
preferences-stg.em.fiacardservices.com
promotions-stg.bankofamerica.com
ees-stg.bankofamerica.com
getstarted-stg.bankofamerica.com
ux.bankofamerica.com
ux-stg.bankofamerica.com
www.bamlinsights.com
www-stg.bamlinsights.com
bankatwork.bankofamerica.com
bankatwork-stg.bankofamerica.com
hrforum.bamlevents.com
hrforum-stg.bamlevents.com
healthaccounts.bankofamerica.com
healthaccounts-stg.bankofamerica.com
www.saveituseit.com
saveituseit-stg.fsqa.ml.com
utility.bankofamerica.com
utility-stg.bankofamerica.com
personalize.bankofamerica.com
personalize-stg.bankofamerica.com
ba.ml.com
rg.ml.com
ba-stg.fsqa.ml.com
rg-stg.fsqa.ml.com
www.bamlevents.com
www.bamlclientconf.com
www.premieradvisorconf.com
www.gicadvisorconf.com
www.bamlrbcevent.com
bamlevents-stg.fsqa.ml.com
bamlclientconf-stg.fsqa.ml.com
premieradvisorconf-stg.fsqa.ml.com
gicadvisorconf-stg.fsqa.ml.com
bamlrbcevent-stg.fsqa.ml.com
Other certificates including the domain name bankofamerica.com
(limited to 100 certificates)
dcpr-apac.bankofamerica.com
b2bservice-dev4.ecnp.bankofamerica.com
elink-mbi-s.bankofamerica.com
atmhold-tt.bankofamerica.com
abwebpay-mbod.bankofamerica.com
webatm-test-dev1b-pipB.bankofamerica.com
webatm-test-cer1a-pipD.bankofamerica.com
fix-mtls-prod-out-ma-order.bankofamerica.com
CAPTIVESERVICE.BANKOFAMERICA.COM
mqt.qtjrchin.bankofamerica.com
secure.bankofamerica.com
travelcenter2.bankofamerica.com
69863-nonprod.bankofamerica.com
directsso.bankofamerica.com
gpx-discover-diners-pulse-lle-clientcert.ecnp.bankofamerica.com
testingNotifications-CertAdminPlzApprove.bankofamerica.com
origin-bac-assets-cert.ecnp.bankofamerica.com
sso-prd.bankofamerica.com
eib-vgs-sit1.bankofamerica.com
cpo-accelerate-websvcs-test2.bankofamerica.com
usvarchvp2isa01.bankofamerica.com
ibsshopsafedev6.bankofamerica.com
rxserve-9H.bankofamerica.com
Standard_SSL_Digicert_CASpec.bankofamerica.com
globalcommissionpayments.bankofamerica.com
appb1.paymentsinvoicing.bankofamerica.com
secure-devps.ecnp.bankofamerica.com
mservice-qa5.ecnp.bankofamerica.com
mservice-qaps.ecnp.bankofamerica.com
bl-qip.emea.bankofamerica.com
cldirect.bankofamerica.com
fbrm-pssit.bankofamerica.com
sbbankers.ltngp2dev.bankofamerica.com
wmobile.bankofamerica.com
escrowonline-lt.bankofamerica.com
socialapp-pt1.ecnp.bankofamerica.com
MO8XCHRS002.bankofamerica.com
winsso-stg.sm.bankofamerica.com
oos0i.lbxatl.bankofamerica.com
CRDTCTR-70336-nCinoClientAuth-BFUAT.bankofamerica.com
outlookanywhere.bankofamerica.com
epass-uat.bankofamerica.com
eftx-pt1.ecnp.bankofamerica.com
NDM.9M33.bankofamerica.com
mqt.mub1chin.bankofamerica.com
ssologon-deveast.bankofamerica.com
finapp.allmyaccounts.test2.bankofamerica.com
boardvantage-uat.bankofamerica.com
portalb2b-rch.bankofamerica.com
ftp-vmsdf1.bankofamerica.com
uat-authorprimary-merch.bankofamerica.com
travelcenter.bankofamerica.com
cmbsi-uat1.bankofamerica.com
travelpaymentsystem.bankofamerica.com
winsso-prd.sm.bankofamerica.com
rvdealer-cit.bankofamerica.com
fbrm-sit1.bankofamerica.com
ftp-hbs.bankofamerica.com
safepass-cpo.bankofamerica.com
cictsc3a.9s.bankofamerica.com
secure-preview1.ecnp.bankofamerica.com
corp.bankofamerica.com
origin-bac-assets-dev.ecnp.bankofamerica.com
everest-qa.bankofamerica.com
racf-1R.bankofamerica.com
fbrm.bankofamerica.com
symphony-online-dr-vip.bankofamerica.com
rmbs.bankofamerica.com
WAS.prodeu01.bankofamerica.com
crm.fxqa.ml.com
corp.bankofamerica.com
ecsb.bankofamerica.com
elink-as2h8.bankofamerica.com
portal.bankofamerica.com
bofacapital-certs.bankofamerica.com
mqp.mqwxchin.bankofamerica.com
bofacapital-certs-pp.bankofamerica.com
viewinv-techtest.bankofamerica.com
cicpvx62.1s.bankofamerica.com
remotepc-us.bankofamerica.com
akamai-san10.exacttarget.com
tx8aiucm02403.bankofamerica.com
secure-review1.ecnp.bankofamerica.com
socialapp-devflex.ecnp.bankofamerica.com
mlqua400.bankofamerica.com
support-services.bankofamerica.com
ustxrdncu01aac0001.network.bankofamerica.com
soap-aci1.bankofamerica.com
mqp.qpc1chin.bankofamerica.com
ecds-uat.bankofamerica.com
mservice-dev2.ecnp.bankofamerica.com
ccpsbob.bankofamerica.com
cporms-test.bankofamerica.com
resfcmbs.bankofamerica.com
IMSPW3CA.1S.bankofamerica.com
globalroutingdirectory.bankofamerica.com
aeadmin.bankofamerica.com
fedsso.bankofamerica.com
rest-cert2.ecnp.bankofamerica.com
psgws.bankofamerica.com
b2bservice-dev4.ecnp.bankofamerica.com
elink-mbi-s.bankofamerica.com
atmhold-tt.bankofamerica.com
abwebpay-mbod.bankofamerica.com
webatm-test-dev1b-pipB.bankofamerica.com
webatm-test-cer1a-pipD.bankofamerica.com
fix-mtls-prod-out-ma-order.bankofamerica.com
CAPTIVESERVICE.BANKOFAMERICA.COM
mqt.qtjrchin.bankofamerica.com
secure.bankofamerica.com
travelcenter2.bankofamerica.com
69863-nonprod.bankofamerica.com
directsso.bankofamerica.com
gpx-discover-diners-pulse-lle-clientcert.ecnp.bankofamerica.com
testingNotifications-CertAdminPlzApprove.bankofamerica.com
origin-bac-assets-cert.ecnp.bankofamerica.com
sso-prd.bankofamerica.com
eib-vgs-sit1.bankofamerica.com
cpo-accelerate-websvcs-test2.bankofamerica.com
usvarchvp2isa01.bankofamerica.com
ibsshopsafedev6.bankofamerica.com
rxserve-9H.bankofamerica.com
Standard_SSL_Digicert_CASpec.bankofamerica.com
globalcommissionpayments.bankofamerica.com
appb1.paymentsinvoicing.bankofamerica.com
secure-devps.ecnp.bankofamerica.com
mservice-qa5.ecnp.bankofamerica.com
mservice-qaps.ecnp.bankofamerica.com
bl-qip.emea.bankofamerica.com
cldirect.bankofamerica.com
fbrm-pssit.bankofamerica.com
sbbankers.ltngp2dev.bankofamerica.com
wmobile.bankofamerica.com
escrowonline-lt.bankofamerica.com
socialapp-pt1.ecnp.bankofamerica.com
MO8XCHRS002.bankofamerica.com
winsso-stg.sm.bankofamerica.com
oos0i.lbxatl.bankofamerica.com
CRDTCTR-70336-nCinoClientAuth-BFUAT.bankofamerica.com
outlookanywhere.bankofamerica.com
epass-uat.bankofamerica.com
eftx-pt1.ecnp.bankofamerica.com
NDM.9M33.bankofamerica.com
mqt.mub1chin.bankofamerica.com
ssologon-deveast.bankofamerica.com
finapp.allmyaccounts.test2.bankofamerica.com
boardvantage-uat.bankofamerica.com
portalb2b-rch.bankofamerica.com
ftp-vmsdf1.bankofamerica.com
uat-authorprimary-merch.bankofamerica.com
travelcenter.bankofamerica.com
cmbsi-uat1.bankofamerica.com
travelpaymentsystem.bankofamerica.com
winsso-prd.sm.bankofamerica.com
rvdealer-cit.bankofamerica.com
fbrm-sit1.bankofamerica.com
ftp-hbs.bankofamerica.com
safepass-cpo.bankofamerica.com
cictsc3a.9s.bankofamerica.com
secure-preview1.ecnp.bankofamerica.com
corp.bankofamerica.com
origin-bac-assets-dev.ecnp.bankofamerica.com
everest-qa.bankofamerica.com
racf-1R.bankofamerica.com
fbrm.bankofamerica.com
symphony-online-dr-vip.bankofamerica.com
rmbs.bankofamerica.com
WAS.prodeu01.bankofamerica.com
crm.fxqa.ml.com
corp.bankofamerica.com
ecsb.bankofamerica.com
elink-as2h8.bankofamerica.com
portal.bankofamerica.com
bofacapital-certs.bankofamerica.com
mqp.mqwxchin.bankofamerica.com
bofacapital-certs-pp.bankofamerica.com
viewinv-techtest.bankofamerica.com
cicpvx62.1s.bankofamerica.com
remotepc-us.bankofamerica.com
akamai-san10.exacttarget.com
tx8aiucm02403.bankofamerica.com
secure-review1.ecnp.bankofamerica.com
socialapp-devflex.ecnp.bankofamerica.com
mlqua400.bankofamerica.com
support-services.bankofamerica.com
ustxrdncu01aac0001.network.bankofamerica.com
soap-aci1.bankofamerica.com
mqp.qpc1chin.bankofamerica.com
ecds-uat.bankofamerica.com
mservice-dev2.ecnp.bankofamerica.com
ccpsbob.bankofamerica.com
cporms-test.bankofamerica.com
resfcmbs.bankofamerica.com
IMSPW3CA.1S.bankofamerica.com
globalroutingdirectory.bankofamerica.com
aeadmin.bankofamerica.com
fedsso.bankofamerica.com
rest-cert2.ecnp.bankofamerica.com
psgws.bankofamerica.com
Certificate
The complete raw certificate details for campus.bankofamerica.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMVTCCCz2gAwIBAgIQe7vgkK/ZMxAAAAAAVM+zTzANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDE0IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0x OTA0MjMxODE3NDdaFw0yMDA0MjMxODQ3NDVaMIHcMQswCQYDVQQGEwJVUzERMA8G A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xEzARBgsrBgEEAYI3PAIB AxMCVVMxGTAXBgsrBgEEAYI3PAIBAhMIRGVsYXdhcmUxJDAiBgNVBAoTG0Jhbmsg b2YgQW1lcmljYSBDb3Jwb3JhdGlvbjEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6 YXRpb24xEDAOBgNVBAUTBzI5Mjc0NDIxITAfBgNVBAMTGGNhbXB1cy5iYW5rb2Zh bWVyaWNhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALu+Sull sc1TnsShRESnmuYk+7uOGbUG/1lI4B+kZh6jOMRQQRD/grxJHg5O0k+Bispl+Frm giU8PnrGcQT69a3AIVQkXWQ1SOYSLjIxBdCPAXP9uIlFOrFYVTsQ68vy7MbbcCtq +Ji7XZ3b9QMCyw4wNwlq5bIlrXRy28PVliaugx5t0TbjN4T2SDBrLJuauvgGxJYy wTJ0PzaAaf+K+Yh04qI1T2N0pGLXfm8LGxjkglRN3n206nZrqxD9dn28gNomDJ3F rn7PGYJSkZqVt/qTV+FalsJ3nULoFmzHE6JIGKcW4dXJyBt/p/7pFB1OP4CTbuVo b1ZMiXG/pDXcggkCAwEAAaOCCDEwgggtMIIFQwYDVR0RBIIFOjCCBTaCGGNhbXB1 cy5iYW5rb2ZhbWVyaWNhLmNvbYIXbG9hbnMuYmFua29mYW1lcmljYS5jb22CF3By b21vLmJhbmtvZmFtZXJpY2EuY29tghJ3d3cubWxteWZ1dHVyZS5jb22CIHByZWZl cmVuY2VzLmVtLmJhbmtvZmFtZXJpY2EuY29tgiJwcmVmZXJlbmNlcy5lbS5maWFj YXJkc2VydmljZXMuY29tghxwcm9tb3Rpb25zLmJhbmtvZmFtZXJpY2EuY29tghVl ZXMuYmFua29mYW1lcmljYS5jb22CHGdldHN0YXJ0ZWQuYmFua29mYW1lcmljYS5j b22CHGNhbXB1cy1zdGcuYmFua29mYW1lcmljYS5jb22CG2xvYW5zLXN0Zy5iYW5r b2ZhbWVyaWNhLmNvbYIbcHJvbW8tc3RnLmJhbmtvZmFtZXJpY2EuY29tghptbG15 ZnV0dXJlLXN0Zy5mc3FhLm1sLmNvbYIkcHJlZmVyZW5jZXMtc3RnLmVtLmJhbmtv ZmFtZXJpY2EuY29tgiZwcmVmZXJlbmNlcy1zdGcuZW0uZmlhY2FyZHNlcnZpY2Vz LmNvbYIgcHJvbW90aW9ucy1zdGcuYmFua29mYW1lcmljYS5jb22CGWVlcy1zdGcu YmFua29mYW1lcmljYS5jb22CIGdldHN0YXJ0ZWQtc3RnLmJhbmtvZmFtZXJpY2Eu Y29tghR1eC5iYW5rb2ZhbWVyaWNhLmNvbYIYdXgtc3RnLmJhbmtvZmFtZXJpY2Eu Y29tghR3d3cuYmFtbGluc2lnaHRzLmNvbYIYd3d3LXN0Zy5iYW1saW5zaWdodHMu Y29tghxiYW5rYXR3b3JrLmJhbmtvZmFtZXJpY2EuY29tgiBiYW5rYXR3b3JrLXN0 Zy5iYW5rb2ZhbWVyaWNhLmNvbYIWaHJmb3J1bS5iYW1sZXZlbnRzLmNvbYIaaHJm b3J1bS1zdGcuYmFtbGV2ZW50cy5jb22CIGhlYWx0aGFjY291bnRzLmJhbmtvZmFt ZXJpY2EuY29tgiRoZWFsdGhhY2NvdW50cy1zdGcuYmFua29mYW1lcmljYS5jb22C E3d3dy5zYXZlaXR1c2VpdC5jb22CG3NhdmVpdHVzZWl0LXN0Zy5mc3FhLm1sLmNv bYIZdXRpbGl0eS5iYW5rb2ZhbWVyaWNhLmNvbYIddXRpbGl0eS1zdGcuYmFua29m YW1lcmljYS5jb22CHXBlcnNvbmFsaXplLmJhbmtvZmFtZXJpY2EuY29tgiFwZXJz b25hbGl6ZS1zdGcuYmFua29mYW1lcmljYS5jb22CCWJhLm1sLmNvbYIJcmcubWwu Y29tghJiYS1zdGcuZnNxYS5tbC5jb22CEnJnLXN0Zy5mc3FhLm1sLmNvbYISd3d3 LmJhbWxldmVudHMuY29tghZ3d3cuYmFtbGNsaWVudGNvbmYuY29tghp3d3cucHJl bWllcmFkdmlzb3Jjb25mLmNvbYIWd3d3LmdpY2Fkdmlzb3Jjb25mLmNvbYIUd3d3 LmJhbWxyYmNldmVudC5jb22CGmJhbWxldmVudHMtc3RnLmZzcWEubWwuY29tgh5i YW1sY2xpZW50Y29uZi1zdGcuZnNxYS5tbC5jb22CInByZW1pZXJhZHZpc29yY29u Zi1zdGcuZnNxYS5tbC5jb22CHmdpY2Fkdmlzb3Jjb25mLXN0Zy5mc3FhLm1sLmNv bYIcYmFtbHJiY2V2ZW50LXN0Zy5mc3FhLm1sLmNvbTCCAX0GCisGAQQB1nkCBAIE ggFtBIIBaQFnAHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFq S4aC8AAABAMARjBEAiBvCVqi7+9ACX/1Mv1X3FRXevuBaSXSLF0lReaPbZXImgIg Zd19GuKLxAqkbK7ciLy/ILF64tuER+km3YKaJG7utIgAdgCHdb/nWXz4jEOZX73z bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWpLhoL5AAAEAwBHMEUCICuFdI8kJ2blLVd3 arCLTCbT+zSRbOcwcV9urHz34NYHAiEAp/uNm2GuOO9YPQTTsakYSZfRf7IqwvVq lAGOx9P0WYkAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAWpL hoMIAAAEAwBHMEUCIQDiLYX62gZAV7gHsEWeh41zBnEjANmjet1A2V7Pmap8gAIg OJkETOArU6ok6yLgSF0Xmlpd0lSTrVHxKTSEmTnUxDwwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBoBggrBgEFBQcBAQRcMFow IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAC hidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxbS1jaGFpbjI1Ni5jZXIwMwYDVR0f BCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFtLmNybDBK BgNVHSAEQzBBMDYGCmCGSAGG+mwKAQIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3 dy5lbnRydXN0Lm5ldC9ycGEwBwYFZ4EMAQEwHwYDVR0jBBgwFoAUw/fQtSowra8N kSFwOVTdvIlwxzowHQYDVR0OBBYEFHylx3ymbocksgmEu64LFe4v6oOcMAkGA1Ud EwQCMAAwDQYJKoZIhvcNAQELBQADggEBAKxc3NdCyCJdgaC17UOuh9T2rxlXn9HZ CIZ3/Srlgs7FjLaM6EHWP1QOUSYuYSkWLPcurnrMbJUe4DOYV74rZg56mtYof8l1 gusqizuf3wazhl5fLbs9iuwjy/8AQQ0PbUAJjsXniH2lf+O9DQIa47BD9JfgHdNH gRu3bTllk0mRPt8WfoC6c9sWqYuSer4pAm80YX+yMPNpOgIp5OeuQS2zVYyM0vN4 fQJI93+S1QqSvFzYrdl3RJzlZ/s0LhZvmzeHdWAx+WYbGtWrFKkBqyJlzRy/VyZM x5iN5PebnlpEYI8rFAd2eMdaGaYVcR9GH2FFsrUITkxJ0+Tmp7IiVCc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu75K6WWxzVOexKFERKea 5iT7u44ZtQb/WUjgH6RmHqM4xFBBEP+CvEkeDk7ST4GKymX4WuaCJTw+esZxBPr1 rcAhVCRdZDVI5hIuMjEF0I8Bc/24iUU6sVhVOxDry/LsxttwK2r4mLtdndv1AwLL DjA3CWrlsiWtdHLbw9WWJq6DHm3RNuM3hPZIMGssm5q6+AbEljLBMnQ/NoBp/4r5 iHTiojVPY3SkYtd+bwsbGOSCVE3efbTqdmurEP12fbyA2iYMncWufs8ZglKRmpW3 +pNX4VqWwnedQugWbMcTokgYpxbh1cnIG3+n/ukUHU4/gJNu5WhvVkyJcb+kNdyC CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 164470557717119739919373341973093004111 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 18:17:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 18:47:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank of America Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2927442' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campus.bankofamerica.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23700399818823056606534908657284512365721595819252579662243766924313929536250712192693832451139625955538533975538673758179083148176437940881012589706746540206592887840983788783853213458635839898441333623939980014602022369017084293683065167696332814160776963741785841525743154878567369641415120429640965190794385303580477435808368815127993577290200056239216208881322227770147203180570344062792901699740678853172259356154310495876684048919024499832636577588702258926954729232638435448156564576501493159440193576830461798348618592688854197829643643460090189312085111593947318413138366356719207653676408395149895645561353 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1338 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlmyfuture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences.em.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences.em.fiacardservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotions.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getstarted.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlmyfuture-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences-stg.em.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences-stg.em.fiacardservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotions-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getstarted-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ux.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ux-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamlinsights.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg.bamlinsights.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankatwork.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankatwork-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrforum.bamlevents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrforum-stg.bamlevents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthaccounts.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthaccounts-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saveituseit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saveituseit-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utility.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utility-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalize.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalize-stg.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rg.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rg-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamlevents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamlclientconf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premieradvisorconf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gicadvisorconf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamlrbcevent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamlevents-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamlclientconf-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premieradvisorconf-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gicadvisorconf-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamlrbcevent-stg.fsqa.ml.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7ca5c77ca66e8724b20984bbae0b15ee2fea839c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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