nonprod-easycare.libertymedicalinsurance.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d7:aa:d2:28:ac:a1:f4:d9:00:00:00:00:50:f0:99:23 was issued on by Entrust, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRM East
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d7:aa:d2:28:ac:a1:f4:d9:00:00:00:00:50:f0:99:23
Serial Number (int): 286670972088278315799125826308322400547
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: df:47:f3:03:29:12:fc:3c:8d:10:70:bc:35:00:81:58:2c:11:7e:f2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e3:46:a5:60:4c:88:ce:af:14:1c:75:24:e5:2d:93:3c:77:b5:49:ec
Fingerprint (sha256): 4a:db:49:e7:25:fa:19:66:e3:c6:af:61:ea:96:c1:88:ff:f6:ee:0f:9a:49:cd:b4:fe:bc:5a:cf:f4:26:fd:ec

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate nonprod-easycare.libertymedicalinsurance.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nonprod-easycare.libertymedicalinsurance.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat02.liil.com.hk
claims-uat.libertyinsurance.in
nonprod-digital.libertyinsurance.com.sg
nonprod-api.libertyinsurance.com.sg
www.nonprod-easycare.libertymedicalinsurance.com
www.dev-digital.libertyinsurance.com.sg
www.dev-api.libertyinsurance.com.sg
dev-digital.libertyinsurance.com.sg
dev-api.libertyinsurance.com.sg
www.capacitacion.libertyseguros.co
capacitacion.libertyseguros.co
nonprod-easycare.libertymedicalinsurance.com

Other certificates including the domain name libertymedicalinsurance.com

(limited to 100 certificates)
libertymutual.com
www.libertyinsurance.ie
libertyseguros.com
digital.libertyseguros.co
libertyseguros.com
libertyseguros.com
uat.mediedge.com
se-asia-soe-gatway.aws.lmig.com
libertymutual.com
www.libertyinsurance.ie
nonprod-easycare.libertymedicalinsurance.com
www.libertyinsurance.ie
libertyseguros.com
libertyseguros.com
nonprod-easycare.libertymedicalinsurance.com
www.libertyinsurance.ie
libertymutual.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
libertyseguros.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
www.libertyinsurance.ie
nonprod-easycare.libertymedicalinsurance.com
libertyseguros.com
nonprod-easycare.libertymedicalinsurance.com
digital.libertyseguros.co
libertyseguros.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
libertyseguros.com
www.libertyinsurance.ie
www.libertyinsurance.ie
www.libertyinsurance.ie
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
se-asia-soe-gatway.aws.lmig.com
libertymutual.com
libertyseguros.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
se-asia-cancer-products-ui.aws.lmig.com
digital.libertyseguros.co
www.libertyinsurance.ie
uat.mediedge.com
www.libertyinsurance.ie
libertyseguros.com
libertyseguros.com
www.libertyinsurance.ie
www.libertyinsurance.ie
www.libertyinsurance.ie
uat.mediedge.com
www.libertyinsurance.ie
nonprod-easycare.libertymedicalinsurance.com
libertyseguros.com
libertyseguros.com
libertyseguros.com
nonprod-easycare.libertymedicalinsurance.com
libertyseguros.com
www.libertyinsurance.ie
www.libertyinsurance.ie
libertymutual.com
www.libertyinsurance.ie
www.libertyinsurance.ie
libertyseguros.com
digital.libertyseguros.co
libertyseguros.com
libertymutual.com
libertymutual.com
digital.libertyseguros.co
uat.mediedge.com
libertyseguros.com
uat.mediedge.com
libertyseguros.com
www.libertyinsurance.ie
libertymutual.com
libertyseguros.com
nonprod-easycare.libertymedicalinsurance.com
www.libertyinsurance.ie
digital.libertyseguros.co
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
www.libertyinsurance.ie
libertymutual.com
www.libertyinsurance.ie
digital.libertyseguros.co
libertyseguros.com
digital.libertyseguros.co
www.libertyinsurance.ie
libertyseguros.com
digital.libertyseguros.co

Certificate

The complete raw certificate details for nonprod-easycare.libertymedicalinsurance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuubojB4LuPfp0kFxmaXJ
yC+znn8meoDZGbLkJFV2364wBBqBTW1No15WvVTagmN4rCpM6SCcAScNVnNr7olY
934QW6gnQB22JyUP8A2P1yqG14I+Cc9AcOdi94NwMQjAmW9BO9F4/wrVpjdivBZy
2L/KZ7C7puyrxOnWT9i6cMzNrMHYZ2nGVvoXTwzyUk8I+BOtjG9hdbVdftOrkes1
JQZq5BmFCznGYAUkPPcSrA3J0IQy8OqsvIT5RklJTh6jd+Xv7fL4AM7HhKPbw4FB
0gMp17CTpWqM0E++Lb5mzGJ61Vj/tS2+OfDHwiLzGcR6i3FKOhMMaZdcxyYFL9my
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286670972088278315799125826308322400547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 13:11:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 13:41:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRM East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprod-easycare.libertymedicalinsurance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23594189893633226381489712151746912050138067336394905857428611035310240550252353302832095067229768883921909896696013388817072510902794728434380782945566826267788775079040378098382781928036880564540325657350971545620346539478424214474173287592700485503033488970622555638563587912126113298326111467093393926259816938232276607553116343523140801761756918572380070862221356214443527295974747186383669299253146431931031981403426953032934238046315559838895103400447358655464343722356878616461548535921078879588938039998645907316884723572654396583459753599327243846231064855771313423073303487614559598652453683548558336832007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat02.liil.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-uat.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-digital.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-api.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprod-easycare.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-digital.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-api.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-digital.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capacitacion.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacitacion.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-easycare.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df47f3032912fc3c8d1070bc350081582c117ef2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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