m.hach.com
- Hach Company -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 50:d3:9a:6e was issued on by Entrust, Inc..
With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Hach Company
Organization:
Hach Company
State / Province:
Colorado
Locality: Loveland
Country: US
Locality: Loveland
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 50:d3:9a:6eSerial Number (int): 1356044910
Serial Number lenght: 31 bits, 4 octets
SubjectKeyId: 43:5f:68:d0:ea:ea:df:11:71:f2:41:31:b5:e7:44:0d:4b:f7:17:2d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 1b:5a:27:ac:b5:5d:97:5c:74:77:4c:7a:63:2f:96:c2:b9:14:9e:2c
Fingerprint (sha256): 4b:86:21:7c:5c:e2:fd:18:f9:a8:a5:dd:79:70:53:09:49:84:22:86:1c:31:db:f5:5d:9a:7e:70:42:d7:99:d6
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate m.hach.com
32
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for m.hach.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
m.hach.com
m.hach.mx
m.hach-lange.se
m.hach-lange.es
m.hach-lange.co.uk
m.hach-lange.cz
m.hach-lange.at
m.hach-lange.nl
m.hach-lange.sk
m.hachco.in
m.hach-lange.hr
m.ru.hach-lange.com
m.hach-lange.si
m.hachco.ca
m.hach-lange.pl
m.hach-lange.hu
m.hach-lange.ro
m.sea.hach.com
m.hach-lange.pt
m.hach-lange.fr
m.mena.hach-lange.com
m.hach-lange.ch
m.hach-lange.ie
m.hach-lange.com.tr
m.hachpacific.co.nz
m.hachpacific.au.com
m.hach-lange.be
m.hach-lange.gr
m.hach-lange.bg
m.hach-lange.it
m.hach-lange.de
m.hach-lange.dk
m.hach.mx
m.hach-lange.se
m.hach-lange.es
m.hach-lange.co.uk
m.hach-lange.cz
m.hach-lange.at
m.hach-lange.nl
m.hach-lange.sk
m.hachco.in
m.hach-lange.hr
m.ru.hach-lange.com
m.hach-lange.si
m.hachco.ca
m.hach-lange.pl
m.hach-lange.hu
m.hach-lange.ro
m.sea.hach.com
m.hach-lange.pt
m.hach-lange.fr
m.mena.hach-lange.com
m.hach-lange.ch
m.hach-lange.ie
m.hach-lange.com.tr
m.hachpacific.co.nz
m.hachpacific.au.com
m.hach-lange.be
m.hach-lange.gr
m.hach-lange.bg
m.hach-lange.it
m.hach-lange.de
m.hach-lange.dk
Other certificates including the domain name hach.com
(limited to 100 certificates)
ru.hach.com
ffco-eu.fsn.hach.com
it.lesl.cloud
us.fsn.hach.com
status.adaptive.co.uk
it.lesl.cloud
ffse-eu.fsn.hach.com
fsdata.hach.com
ru.hach.com
ru.hach.com
inframark.hach.com
fcwb-us.fsn.hach.com
it.lesl.cloud
ffco-us.fsn.hach.com
it.lesl.cloud
ftp.hach.com
fsdata.hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
istore.hach.com
status.acloud.guru
ru.hach.com
go.hach.com
platformstatus.northebridge.com
ru.hach.com
m.hach.com
api-eu.fsn.hach.com
status.acloud.guru
it.lesl.cloud
Inframark.hach.com
fsdata.hach.com
status.acloud.guru
ffdac-us.fsn.hach.com
hachvpn-eu.hach.com
citrix.hach.com
status.adaptive.co.uk
ru.hach.com
ffco-eu.fsn.hach.com
ru.hach.com
ottvpn2.hach.com
dds.hach.com
*.Hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
platformstatus.northebridge.com
itsupport.hach.com
orion.fsn.hach.com
foart-us.fsn.hach.com
www.hach.com
ffdac-eu.fsn.hach.com
wims.hach.com
it.lesl.cloud
virtual.hach.com
hachvpn-eu.hach.com
it.lesl.cloud
es.support.hach.com
ffaa-us.fsn.hach.com
virtual.hach.com
knowledge.hach.com
us.fsn.hach.com
status.acloud.guru
it.lesl.cloud
NHP.HACH.COM
it.lesl.cloud
na-access.danahermail.com
hachvpn1.hach.com
ru.hach.com
go.hach.com
istore.hach.com
info.hach.com
ru.hach.com
imperva.com
imperva.com
nhp.hach.com
it.lesl.cloud
hachvpn-ind.hach.com
ffaa-us.fsn.hach.com
hachvpn.hach.com
support.hach.com
it.lesl.cloud
hachvpn.hach.com
it.lesl.cloud
hachvpn2.hach.com
ru.hach.com
frsupport.hach.com
it.lesl.cloud
api-us.fsn.hach.com
us.fsn.hach.com
status.adaptive.co.uk
sds.hach.com
status.acloud.guru
rd.hach.com
m.hach.com
wfeu.fsn.hach.com
ottvpn1.hach.com
sea.hach.com
pibs.hach.com
ffco-us.fsn.hach.com
ffco-eu.fsn.hach.com
it.lesl.cloud
us.fsn.hach.com
status.adaptive.co.uk
it.lesl.cloud
ffse-eu.fsn.hach.com
fsdata.hach.com
ru.hach.com
ru.hach.com
inframark.hach.com
fcwb-us.fsn.hach.com
it.lesl.cloud
ffco-us.fsn.hach.com
it.lesl.cloud
ftp.hach.com
fsdata.hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
istore.hach.com
status.acloud.guru
ru.hach.com
go.hach.com
platformstatus.northebridge.com
ru.hach.com
m.hach.com
api-eu.fsn.hach.com
status.acloud.guru
it.lesl.cloud
Inframark.hach.com
fsdata.hach.com
status.acloud.guru
ffdac-us.fsn.hach.com
hachvpn-eu.hach.com
citrix.hach.com
status.adaptive.co.uk
ru.hach.com
ffco-eu.fsn.hach.com
ru.hach.com
ottvpn2.hach.com
dds.hach.com
*.Hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
platformstatus.northebridge.com
itsupport.hach.com
orion.fsn.hach.com
foart-us.fsn.hach.com
www.hach.com
ffdac-eu.fsn.hach.com
wims.hach.com
it.lesl.cloud
virtual.hach.com
hachvpn-eu.hach.com
it.lesl.cloud
es.support.hach.com
ffaa-us.fsn.hach.com
virtual.hach.com
knowledge.hach.com
us.fsn.hach.com
status.acloud.guru
it.lesl.cloud
NHP.HACH.COM
it.lesl.cloud
na-access.danahermail.com
hachvpn1.hach.com
ru.hach.com
go.hach.com
istore.hach.com
info.hach.com
ru.hach.com
imperva.com
imperva.com
nhp.hach.com
it.lesl.cloud
hachvpn-ind.hach.com
ffaa-us.fsn.hach.com
hachvpn.hach.com
support.hach.com
it.lesl.cloud
hachvpn.hach.com
it.lesl.cloud
hachvpn2.hach.com
ru.hach.com
frsupport.hach.com
it.lesl.cloud
api-us.fsn.hach.com
us.fsn.hach.com
status.adaptive.co.uk
sds.hach.com
status.acloud.guru
rd.hach.com
m.hach.com
wfeu.fsn.hach.com
ottvpn1.hach.com
sea.hach.com
pibs.hach.com
ffco-us.fsn.hach.com
Certificate
The complete raw certificate details for m.hach.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIEUNOabjANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNTAzMTkxMzAwMDFa Fw0xNjAzMTkxNzU3MTFaMF8xCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhDb2xvcmFk bzERMA8GA1UEBxMITG92ZWxhbmQxFTATBgNVBAoTDEhhY2ggQ29tcGFueTETMBEG A1UEAxMKbS5oYWNoLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANZvdPt89+KTqv774ypbs+DDetXWTw3YNRMCBeCy3xvogE825LJUizGcs7TU82Fd zWNQGIl4YeHVq0fTTwX7tzPGQFZkjhtLhHla/boINHqcgxc6pnPixnseZAoxZjFD +OETgIfYo6525+ugEJW7vE+A/Iu+df48oFUZrSNaCQwu9o7xPo7to9j1vVCea+Xa yQn6rcM6oDyz8FtRZeeGrD2yZIm2j3kVgBM/JM+79hxEmY/m8WsEcHWj3NU/og7j 7AJnL0vj7SukiXMquBAULO9KWqlNsjKtF8pPXCCkZJq2KTHqJnFJsZK+v3j8XYoR OwAt+GxAI40PDm+0P6CnNHkCAwEAAaOCA54wggOaMAsGA1UdDwQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0 cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCG SAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9y cGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDov L29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVz dC5uZXQvbDFrLWNoYWluMjU2LmNlcjCCAjMGA1UdEQSCAiowggImggptLmhhY2gu Y29tggltLmhhY2gubXiCD20uaGFjaC1sYW5nZS5zZYIPbS5oYWNoLWxhbmdlLmVz ghJtLmhhY2gtbGFuZ2UuY28udWuCD20uaGFjaC1sYW5nZS5jeoIPbS5oYWNoLWxh bmdlLmF0gg9tLmhhY2gtbGFuZ2UubmyCD20uaGFjaC1sYW5nZS5za4ILbS5oYWNo Y28uaW6CD20uaGFjaC1sYW5nZS5ocoITbS5ydS5oYWNoLWxhbmdlLmNvbYIPbS5o YWNoLWxhbmdlLnNpggttLmhhY2hjby5jYYIPbS5oYWNoLWxhbmdlLnBsgg9tLmhh Y2gtbGFuZ2UuaHWCD20uaGFjaC1sYW5nZS5yb4IObS5zZWEuaGFjaC5jb22CD20u aGFjaC1sYW5nZS5wdIIPbS5oYWNoLWxhbmdlLmZyghVtLm1lbmEuaGFjaC1sYW5n ZS5jb22CD20uaGFjaC1sYW5nZS5jaIIPbS5oYWNoLWxhbmdlLmllghNtLmhhY2gt bGFuZ2UuY29tLnRyghNtLmhhY2hwYWNpZmljLmNvLm56ghRtLmhhY2hwYWNpZmlj LmF1LmNvbYIPbS5oYWNoLWxhbmdlLmJlgg9tLmhhY2gtbGFuZ2UuZ3KCD20uaGFj aC1sYW5nZS5iZ4IPbS5oYWNoLWxhbmdlLml0gg9tLmhhY2gtbGFuZ2UuZGWCD20u aGFjaC1sYW5nZS5kazAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAd BgNVHQ4EFgQUQ19o0Orq3xFx8kExtedEDUv3Fy0wCQYDVR0TBAIwADANBgkqhkiG 9w0BAQsFAAOCAQEAqtoJK0FQkSv/3VYUKbz8ZhdcBLuaJMKu9SHPeXc9+0Vsrffw lLF1RyMlyglVGlo1ly3m2/6fO9xYQyE3wdTW+nlxu2Ojl1DyW3ihbfJH8M6cAAU5 FyWYSZImlswgdOQf8YLY9VkEO/AjpvW3+M/xuLQUrAKiF0FYhNMoaZyQ3ncy9S82 kiv387LcnIeAnoqwxJnC3Z/zYiI4Kr6zxvtKdBnNGLUew7gEZIk+PDvkZVdd42wX XxNmdosO7QSpMUlYoslQiH/FtxMCnK2h3aU7qFcxVSh0VldaiKBy/QXHoeXfhpyy zjYMB+dCUuuyaUoFohzTbBQXfo09yh6322xAfg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m90+3z34pOq/vvjKluz 4MN61dZPDdg1EwIF4LLfG+iATzbkslSLMZyztNTzYV3NY1AYiXhh4dWrR9NPBfu3 M8ZAVmSOG0uEeVr9ugg0epyDFzqmc+LGex5kCjFmMUP44ROAh9ijrnbn66AQlbu8 T4D8i751/jygVRmtI1oJDC72jvE+ju2j2PW9UJ5r5drJCfqtwzqgPLPwW1Fl54as PbJkibaPeRWAEz8kz7v2HESZj+bxawRwdaPc1T+iDuPsAmcvS+PtK6SJcyq4EBQs 70paqU2yMq0Xyk9cIKRkmrYpMeomcUmxkr6/ePxdihE7AC34bEAjjQ8Ob7Q/oKc0 eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1356044910 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-19 13:00:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-19 17:57:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Loveland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hach Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.hach.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27069958739340610950073792334632400184496836877850118094319539404533035446760006477426252923774470525729402605295418103119456900864947987164103532338473029767090284211275088227959099674986332016660266164528606897263862842253005035299820906439853216107004522571518306691486394361639054220926595983700992860112307605945077114095111957980495282056533273283052885343348789300804985647594640946532999996524072682920727047049232978027745104755494481820301436097096041950357811027507146802261895421310597627061594630485619404422225789383888753698489198019730502668946155567942693961705401058093244303680464481252721687999609 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (554 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hachco.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ru.hach-lange.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hachco.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sea.hach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mena.hach-lange.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hachpacific.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hachpacific.au.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hach-lange.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 435f68d0eaeadf1171f24131b5e7440d4bf7172d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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