phlowasext.aramarkuc.net
- ARAMARK -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 0f:7a:97:f7:b4:5e:49:c1:00:00:00:00:50:de:d1:a8 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
ARAMARK
Organization:
ARAMARK
State / Province:
Pennsylvania
Locality: Philadelphia
Country: US
Locality: Philadelphia
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:7a:97:f7:b4:5e:49:c1:00:00:00:00:50:de:d1:a8Serial Number (int): 20574962422542568577623971320953754024
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 87:34:6a:0b:fb:a4:14:de:56:70:90:df:84:f6:f6:1b:0a:9a:b3:b9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): ea:69:0a:a4:c5:f9:60:6b:df:d7:f5:76:e0:86:b1:77:a2:4d:bc:03
Fingerprint (sha256): 43:7a:e3:26:a1:f1:b1:0e:0b:a9:02:83:12:ad:4c:e6:b8:ba:03:8c:95:1d:20:2b:95:73:ba:e5:01:94:87:c1
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate phlowasext.aramarkuc.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for phlowasext.aramarkuc.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
phlowasext.aramarkuc.net
phlowas.aramarkuc.net
phlowas.aramarkuc.net
Other certificates including the domain name aramarkuc.net
(limited to 100 certificates)
dgrowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCEDGE01.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
phlowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USDGR0LYCMED01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCEDGE01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
dgrowas.aramarkuc.net
webmail.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCEDGE01.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
phlowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USDGR0LYCMED01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCEDGE01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
dgrowas.aramarkuc.net
webmail.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
Certificate
The complete raw certificate details for phlowasext.aramarkuc.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIQD3qX97ReScEAAAAAUN7RqDANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x NzExMDMxNDAxMTdaFw0yMTAyMDIxNDMxMTZaMHAxCzAJBgNVBAYTAlVTMRUwEwYD VQQIEwxQZW5uc3lsdmFuaWExFTATBgNVBAcTDFBoaWxhZGVscGhpYTEQMA4GA1UE ChMHQVJBTUFSSzEhMB8GA1UEAxMYcGhsb3dhc2V4dC5hcmFtYXJrdWMubmV0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rAfmydJTT09zegi1LIZ+sCf VD8J774SxQVK1iX/3ZLQRe9y9uZgHgks0GJ5TU92+S/AuQIQwlJreYyQq5yZ0/Kd zZYUWNT52sKdz52MWorg5X0vB2mjMnhrdQs1G6p2Ivfl12rbxQ2ee4h0hLjdy3DK 4GsHjp0Odq7KQMEZQpOfUvWw2bLK2XIq6amK8FCdM+Eh3GaziiJOrxyPXOF71rgy 0RhniEMcygerZkCJ8KL9dXqbnXAN9Mv7UsXIpMfM8pBGGVKW4XVfPXC8ZDXhpxqh yJtjY9GkJqmw66gCAwjxsI8lC2lM7in6YvRa2i2T7ZAk/roWehWSKDlqFxQu9wID AQABo4IBuzCCAbcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwOgYDVR0RBDMwMYIYcGhs b3dhc2V4dC5hcmFtYXJrdWMubmV0ghVwaGxvd2FzLmFyYW1hcmt1Yy5uZXQwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNV HR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3Js MEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8v d3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMG CCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYn aHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQY MBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBSHNGoL+6QU3lZwkN+E 9vYbCpqzuTAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAAI34UjptNc1A4 QOvpQozpt3H/DM+N1v+urw5p2JJ1H4hpQ0M8JGdaRmF6fkcwaOUaU4rR8Sux38Ab Vd9Dmu8ZQIlJ6EzsG0ec/4icbQWpUyx244UONemPTuYVYfQx7Jkp5pecPju9c3bV jNhapHQ9x+FSBYUBZrQ8Q7QtosOuChxUHok0Vt6vXKA3c6mWiR7Hyi/yt57O/PTT zYMplGsbcJDrtYTBmU89SATaecsOEQQEAnTlHOJfOBfFkv7gm6HNfkg5PQcTyd43 MyHre4xARzRE/Jw4icuhLvbdNbXgZqhti8BFL+Ted5VFNtQluwNKpXiBlGIjR5dm Dj/zkufo -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rAfmydJTT09zegi1LIZ +sCfVD8J774SxQVK1iX/3ZLQRe9y9uZgHgks0GJ5TU92+S/AuQIQwlJreYyQq5yZ 0/KdzZYUWNT52sKdz52MWorg5X0vB2mjMnhrdQs1G6p2Ivfl12rbxQ2ee4h0hLjd y3DK4GsHjp0Odq7KQMEZQpOfUvWw2bLK2XIq6amK8FCdM+Eh3GaziiJOrxyPXOF7 1rgy0RhniEMcygerZkCJ8KL9dXqbnXAN9Mv7UsXIpMfM8pBGGVKW4XVfPXC8ZDXh pxqhyJtjY9GkJqmw66gCAwjxsI8lC2lM7in6YvRa2i2T7ZAk/roWehWSKDlqFxQu 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20574962422542568577623971320953754024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 14:01:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-02 14:31:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARAMARK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phlowasext.aramarkuc.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29626613077710617523591334823774959462881867276203610360460564686894600574564378471195790856052583936125697499034386379806610028675281522101529865510276174239635308402858128097621528502523989351676603348898350848867362588479256550849290169826264497324672658455870798833700662707296316695891015605122013778248744912576159907798606585442719704761293963876816921934036927298116227939439015671008401050456021552029764024586695428826556411918379954027694617255593474941437250369301291810517590647668661071693030531797240849317664793153095047736258133256673250729441309593804205517129005110477591986347471968696396108017399 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phlowasext.aramarkuc.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phlowas.aramarkuc.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 87346a0bfba414de567090df84f6f61b0a9ab3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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