sts-ad2.my-dsm.com
- DSM Group Business Services BV -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 47:00:08:e4:0f:b6:ea:b0:00:00:00:00:50:f1:e3:b7 was issued on by Entrust, Inc..
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DSM Group Business Services BV
Organization:
DSM Group Business Services BV
Locality:
Heerlen
Country: NL
Country: NL
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 47:00:08:e4:0f:b6:ea:b0:00:00:00:00:50:f1:e3:b7Serial Number (int): 94375368028890317368676651197822788535
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 98:7f:9c:5a:51:4c:38:e3:38:2b:47:72:25:91:89:83:14:67:ef:7b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): ab:5b:c3:6a:a7:f2:ca:18:39:db:35:24:bc:1f:de:88:44:b0:3c:8b
Fingerprint (sha256): 3e:e3:1c:3f:d7:f0:42:2d:54:93:a0:b3:53:79:77:8a:e2:5a:95:86:ba:e5:a6:6b:64:e4:48:2d:dc:9d:d1:ff
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate sts-ad2.my-dsm.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sts-ad2.my-dsm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sts-ad2.my-dsm.com
enterpriseregistration.dsm.com
enterpriseregistration.corpad.dsm-group.com
my-dsm.com
enterpriseregistration.dsm.com
enterpriseregistration.corpad.dsm-group.com
my-dsm.com
Other certificates including the domain name my-dsm.com
(limited to 100 certificates)
virtualweb.dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
*.my-dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
a-sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
sts-ad1.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
a-sts-ad1.my-dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
*.my-dsm.com
a-sts-ad2.my-dsm.com
a-sts-ad2.my-dsm.com
a-sts-ad1.my-dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
a-sts-ad2.my-dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
a-sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
*.my-dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
a-sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
sts-ad1.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
a-sts-ad1.my-dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
*.my-dsm.com
a-sts-ad2.my-dsm.com
a-sts-ad2.my-dsm.com
a-sts-ad1.my-dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
a-sts-ad2.my-dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
virtualweb.dsm.com
sts-ad2.my-dsm.com
virtualweb.dsm.com
intranet.my-dsm.com
virtualweb.dsm.com
a-sts-ad2.my-dsm.com
Certificate
The complete raw certificate details for sts-ad2.my-dsm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIQRwAI5A+26rAAAAAAUPHjtzANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTA1MjAxMTA1MDVaFw0yMDA1MjAxMTM1MDRaMGUxCzAJBgNVBAYTAk5MMRAwDgYD VQQHEwdIZWVybGVuMScwJQYDVQQKEx5EU00gR3JvdXAgQnVzaW5lc3MgU2Vydmlj ZXMgQlYxGzAZBgNVBAMTEnN0cy1hZDIubXktZHNtLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAO2VPb6GHp4cTt0RL/zgMeTU26zpPUOhuhQOfWfr dKgXwt39acPgP/ElwrQRS+gJg1xWGpJluLtwsGGubJzkKwkVfS2QOOhQLAWKsZnr ZbhFw9NpYji3fZCvW6LpPcNuTEjtH5nUMVUBHgCGrxvXC6w8+gMBVJmfsyt1E6xC TjgWTv69qqF5mZqUgJfQTe/KXOvGa9pEqks+ZYZQQnAHHHWbRZAxu7X+9dlrrw2i gvOb+l8ViesO4Zo3DyMBCX0jzFYylQp7hcv3t8yijqWagSFw5d7PIqdX0b9yAnVh aIFFuqrDyvcNLr5vHx6ZcJwNQAeTsFCnMYq2f8QUNDL95n0CAwEAAaOCAfcwggHz MBMGCisGAQQB1nkCBAMBAf8EAgUAMHYGA1UdEQRvMG2CEnN0cy1hZDIubXktZHNt LmNvbYIeZW50ZXJwcmlzZXJlZ2lzdHJhdGlvbi5kc20uY29tgitlbnRlcnByaXNl cmVnaXN0cmF0aW9uLmNvcnBhZC5kc20tZ3JvdXAuY29tggpteS1kc20uY29tMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYD VR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNy bDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDov L3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAj BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKG J2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSME GDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUmH+cWlFMOOM4K0dy JZGJgxRn73swCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEACxY9jdf+QMlJ ZF/1EDu+90zMIeodGT4XXMcusCYH3HZcHo9OsnIzbv4Ha5/P6EkAO7KAcLi5sayC /JYFXF6SN9ojxPofElUUvZKmfnDixiBoHC0YvN6m9E/OgckoxxjGHUKq9ziW9BMv aHWoaPY3kINcyTbyVUuPHgj5o4Zq91HzE5yYmCErrldAmG9n14PARYypAHJX5/AZ TgRbL/fGQkXT+ri13hwaOf3clU0lYA5hYv5vmQ94drnmgV281JUOp7J+Qy9I4iCU 5zHoVS8BZgj3/Fs1Xg+EhOFBa8S9FI0If2o2h7iFD7nU4O4i8mqGMI1JdOlboppA kDqzqmK6gA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZU9voYenhxO3REv/OAx 5NTbrOk9Q6G6FA59Z+t0qBfC3f1pw+A/8SXCtBFL6AmDXFYakmW4u3CwYa5snOQr CRV9LZA46FAsBYqxmetluEXD02liOLd9kK9bouk9w25MSO0fmdQxVQEeAIavG9cL rDz6AwFUmZ+zK3UTrEJOOBZO/r2qoXmZmpSAl9BN78pc68Zr2kSqSz5lhlBCcAcc dZtFkDG7tf712WuvDaKC85v6XxWJ6w7hmjcPIwEJfSPMVjKVCnuFy/e3zKKOpZqB IXDl3s8ip1fRv3ICdWFogUW6qsPK9w0uvm8fHplwnA1AB5OwUKcxirZ/xBQ0Mv3m fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 94375368028890317368676651197822788535 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 11:05:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 11:35:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Heerlen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSM Group Business Services BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts-ad2.my-dsm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29992071849832896452142650263204452795703460511816628920904514732041430728703803988130685872917703756815390632653657749462832142593560014613938185235409641838684879920051694352688829182625060301752542504839448854662787104390064519523289795555620676761060082079506464556083287356220461431884504726160716703636029673859212946117060550227537879537043717153631343035691660012370267211639792076946243043678802787465178747175398958127212828681775978355145410098273673229847471410861866392647273839441577632311803474491314856623492531649113129308398914968398837437120468775003151036535198037798667920766554915396392469784189 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ad2.my-dsm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.dsm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.corpad.dsm-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-dsm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 987f9c5a514c38e3382b4772259189831467ef7b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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