secure.mdl.io

- Mindfireinc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number da:00:e8:ec:ff:86:e7:8e:00:00:00:00:50:fb:59:86 was issued on by Entrust, Inc..

With 214 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mindfireinc

Organization: Mindfireinc
State / Province: California
Locality: Irvine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): da:00:e8:ec:ff:86:e7:8e:00:00:00:00:50:fb:59:86
Serial Number (int): 289776427377067827897318521170174892422
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9a:13:14:db:99:98:0b:ca:72:c5:b4:d2:50:6e:65:b0:a8:f3:49:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 24:86:47:c5:09:d1:a0:e2:56:43:83:43:3d:7a:fc:9c:a0:fc:f2:5d
Fingerprint (sha256): 4c:bf:37:9f:34:8b:2c:18:63:83:2f:b0:1e:7e:fd:84:42:e6:a1:00:e3:6c:08:55:4f:b2:22:33:ff:ed:f2:ae

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate secure.mdl.io

214

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.mdl.io
letsgo.lasell.edu
www.albion-college.com
www.BHGLoan.com
be.tabor.edu
www.BHGcards.com
www.bhgloans.com
www.BHGProLoan.com
www.bhgpowercard.com
www.igive2epic.com
studio.mdl.io
welcometothefamily-customerdirect.m.mdl.io
petcothinkadoptionfirst.m.mdl.io
studio.afw.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io
microsite.container.mdl.io
members.championshipcommitment.com
www.mybhgcards.com
www.mycapitalnow.com
tracking.mdl.io
www.supportecfs.org
www.supporthm.org
applymjur.stmarytx.edu
*.my-dv.com
your.lr.edu
www.grouplegalplanoffer.com
www.investdbq.com
rewards.kewadin.com
itspersonal.martinmethodist.edu
be.hendrix.edu
www.metpdpnetworkdev.com
www.bhgandbanks.com
www.metpdp.com
getsxm.com
www.getsxm.com
monitor.mdl.io
werhome.oc.edu
www.mobltycarpetone.com
hippos.win2wild.com
www.givingmu.com
www.welcometoharvey.com
*.secure.mdl.io
www.edwardsupdate.ca
apply.keystone.edu
promise.keystone.edu
getinfo.cps.gwu.edu
www.lvcscholarship.com
optin.onestarrewards.com
www.BHGPersonal.com
belongat.bw.edu
www.firespringpromo.com
mymccalling.com
DiscoverLACollege.com
faulknerlawschool.com
discoverShorter.com
BPCforMe.com
TransfertoMC.com
YourMCcalling.com
bstrong.wtamu.edu
motiontosucceed.com
www.wpc4cc.com
www.supportsacredheartgreenwich.org
give.dwight.edu
www.cornhuskerbankpowerchecking.com
www.metdhmo.com
experience.coker.edu
imustgo.mhu.edu
go.belmontabbeycollege.edu
www.fdlcrewards.com
www.arcfulfill.com
*.getkasasacash.com
*.getkasasacashback.com
www.c1mm.com
louisianacollegedigital.com
shorterudigital.com
onelimestone.com
www.explorehpu.com
www.explorebrenau.com
www.explorewwc.com
www.explorewestminster.com
www.yourloyola.com
www.gohusson.com
www.explorelesley.com
www.explorelvc.com
www.discoveraic.com
www.youbelongatwells.com
www.gonewmanu.com
www.explorenewcollege.com
www.thinkmeredith.com
connect.linfield.edu
www.championshipcommitment.com
*.getkasasaloans.com
lifecall.truett.edu
opportunity.shawu.edu
weare.su.edu
www.powerchecking.net
app.beaconcollege.edu
www.mbugifted.org
designers.laserimagenc.com
discover.daemen.edu
www.harrychapinsurvey.org
my.lanepress.com
www.Freshstartfast.com
www.clarkhighered.info
www.Needfreshstart.com
www.explorealbion.com
www.discoveruindy.com
www.gofloridapoly.com
www.discoversmcm.com
www.discoverwitt.com
www.explorebellarmine.com
www.discovervalpo.com
www.myelmsexperience.com
www.exploredepauw.com
www.choosegannon.com
www.manchesterbschool.com
www.augradprograms.com
www.harvardextnow.com
www.ptkatharvard.com
www.summeratharvard.com
forms.microf.com
online.onelimestone.com
ready.xula.edu
www.newrezrefi.com
limestone.education
www.supportbrooke.org
www.avicasinorewards.com
www.casinookrewards.com
www.commercialmaintenanceprogram.ca
www.goldriverrewards.com
www.givingbackcanes.com
*.sharekasasaloans.com
giveaways.thumbcellular.com
www.accessmycardoffer.com
www.limestone-digital.com
www.faualumnimembership.com
www.afgarchives.com
Identity.mdl.io
Edge.mdl.io
Client.mdl.io
www.buildingbcs.com
www.blackbearrewards.com
www.winwithradiate.com
transfertolimestone.com
www.gettoknowud.com
tmg.leehealthfoundation.org
www.mycaoffer.com
www.CbnCs-Marketing.com
www.aksteelinvestorday.com
www.mymetdental.com
*.guardretention.com
*.guardofficers.com
*.guardsfab.com
*.guardwarrant.com
*.guardrsp.com
affordmyfuture.com
exploreTFC.com
www.gettoknowpmi.com
www.FSGLoans.com
www.FSGLoan.com
TransferToCatawba.com
BelongAtCatawba.com
www.bellarmineaid.com
2beprepared.pointloma.edu
beprepared.pointloma.edu
www.swhpagentroadshow.com
HI.liveherelearnhereservehere.com
CA.liveherelearnhereservehere.com
IA.GuardFastTrack.com
info.wnegoldenbearclub.com
onwardto.owu.edu
onward2.owu.edu
www.diamondcustomersurvey.com
myAUstory.anderson.edu
mystory.anderson.edu
watchmego2.washjeff.edu
watchme.washjeff.edu
www.openyourmindnow.com
centered.dordt.edu
experience.dordt.edu
donate.newarka.edu
explore.centre.edu
www.theartofcampaigns.com
donate.chapin.edu
www.OnMyWayToNCAT.com
www.OnMyWay2NCAT.com
www.TransferMeToNCAT.com
cpcknights.com
www.bhgpayment.com
www.choosescc.com
connect.delbarton.org
www.yourpathtopossible.com
www.stpressevents.com
yourplace.piedmont.edu
urplace.piedmont.edu
donate.trinityschoolnyc.org
exploretfcdigital.com
uniquely.eureka.edu
mylife2.sdcc.edu
mylife.sdcc.edu
discover.enc.edu
www.myvaluekit.com
www.rittersoffer.com
www.give2greenville.com
real.dordt.edu
findpurpose.swu.edu
www.optinbobcatcce.com
www.kit-offer.com
csupurpose.com
*.bhgpatientlending.com
bethechange.indwes.edu
*.bhgprocard.com

Other certificates including the domain name mdl.io

(limited to 100 certificates)
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
studio.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
studio.dashboard.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io

Certificate

The complete raw certificate details for secure.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIZKDCCGBCgAwIBAgIRANoA6Oz/hueOAAAAAFD7WYYwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkxMjA2MjE0MzM3WhcNMjAwOTIxMjIxMzM0WjBhMQswCQYDVQQGEwJVUzETMBEG
A1UECBMKQ2FsaWZvcm5pYTEPMA0GA1UEBxMGSXJ2aW5lMRQwEgYDVQQKEwtNaW5k
ZmlyZWluYzEWMBQGA1UEAxMNc2VjdXJlLm1kbC5pbzCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBANV/XKWo6hYBHQmfojAuU2hCCLsahGvxzdKHxZqv5ara
d942vhbz8ViTEKJvpJzPFe0grlb2ZgeErAUtFrjN/7b0tdCoQFNhX86dWFqMYhck
V4GynKhgIQcNtmzq7VgUllCv33TKMae+sbQgfUrAf6mX7Imp21dNgDwVUf0H8vhU
4ABjC51m/U1EzV+T5bb9dqjk2Ewg2EVTOsM8nnXYAK6j/3NySRdexFqKZvxFXRbx
Ab9fUwHbodyzdwSmZ62+1FSE0cbNaLsIpqEoMcePQRZvRbo03cpMXb69avczR9eT
UAgfQJfzaeqxFo1SKjN/VICP5rs2o92HaMA7pEJkXRECAwEAAaOCFX8wghV7MIIS
kQYDVR0RBIISiDCCEoSCDXNlY3VyZS5tZGwuaW+CEWxldHNnby5sYXNlbGwuZWR1
ghZ3d3cuYWxiaW9uLWNvbGxlZ2UuY29tgg93d3cuQkhHTG9hbi5jb22CDGJlLnRh
Ym9yLmVkdYIQd3d3LkJIR2NhcmRzLmNvbYIQd3d3LmJoZ2xvYW5zLmNvbYISd3d3
LkJIR1Byb0xvYW4uY29tghR3d3cuYmhncG93ZXJjYXJkLmNvbYISd3d3LmlnaXZl
MmVwaWMuY29tgg1zdHVkaW8ubWRsLmlvgip3ZWxjb21ldG90aGVmYW1pbHktY3Vz
dG9tZXJkaXJlY3QubS5tZGwuaW+CIHBldGNvdGhpbmthZG9wdGlvbmZpcnN0Lm0u
bWRsLmlvghFzdHVkaW8uYWZ3Lm1kbC5pb4IXc3R1ZGlvLmRhc2hib2FyZC5tZGwu
aW+CE3N0dWRpby5hZG1pbi5tZGwuaW+CEnN0dWRpby5wdXJsLm1kbC5pb4IabWlj
cm9zaXRlLmNvbnRhaW5lci5tZGwuaW+CIm1lbWJlcnMuY2hhbXBpb25zaGlwY29t
bWl0bWVudC5jb22CEnd3dy5teWJoZ2NhcmRzLmNvbYIUd3d3Lm15Y2FwaXRhbG5v
dy5jb22CD3RyYWNraW5nLm1kbC5pb4ITd3d3LnN1cHBvcnRlY2ZzLm9yZ4IRd3d3
LnN1cHBvcnRobS5vcmeCFmFwcGx5bWp1ci5zdG1hcnl0eC5lZHWCCyoubXktZHYu
Y29tggt5b3VyLmxyLmVkdYIbd3d3Lmdyb3VwbGVnYWxwbGFub2ZmZXIuY29tghF3
d3cuaW52ZXN0ZGJxLmNvbYITcmV3YXJkcy5rZXdhZGluLmNvbYIfaXRzcGVyc29u
YWwubWFydGlubWV0aG9kaXN0LmVkdYIOYmUuaGVuZHJpeC5lZHWCGHd3dy5tZXRw
ZHBuZXR3b3JrZGV2LmNvbYITd3d3LmJoZ2FuZGJhbmtzLmNvbYIOd3d3Lm1ldHBk
cC5jb22CCmdldHN4bS5jb22CDnd3dy5nZXRzeG0uY29tgg5tb25pdG9yLm1kbC5p
b4IOd2VyaG9tZS5vYy5lZHWCF3d3dy5tb2JsdHljYXJwZXRvbmUuY29tghNoaXBw
b3Mud2luMndpbGQuY29tghB3d3cuZ2l2aW5nbXUuY29tghd3d3cud2VsY29tZXRv
aGFydmV5LmNvbYIPKi5zZWN1cmUubWRsLmlvghR3d3cuZWR3YXJkc3VwZGF0ZS5j
YYISYXBwbHkua2V5c3RvbmUuZWR1ghRwcm9taXNlLmtleXN0b25lLmVkdYITZ2V0
aW5mby5jcHMuZ3d1LmVkdYIWd3d3Lmx2Y3NjaG9sYXJzaGlwLmNvbYIYb3B0aW4u
b25lc3RhcnJld2FyZHMuY29tghN3d3cuQkhHUGVyc29uYWwuY29tgg9iZWxvbmdh
dC5idy5lZHWCF3d3dy5maXJlc3ByaW5ncHJvbW8uY29tgg9teW1jY2FsbGluZy5j
b22CFURpc2NvdmVyTEFDb2xsZWdlLmNvbYIVZmF1bGtuZXJsYXdzY2hvb2wuY29t
ghNkaXNjb3ZlclNob3J0ZXIuY29tggxCUENmb3JNZS5jb22CEFRyYW5zZmVydG9N
Qy5jb22CEVlvdXJNQ2NhbGxpbmcuY29tghFic3Ryb25nLnd0YW11LmVkdYITbW90
aW9udG9zdWNjZWVkLmNvbYIOd3d3LndwYzRjYy5jb22CI3d3dy5zdXBwb3J0c2Fj
cmVkaGVhcnRncmVlbndpY2gub3Jngg9naXZlLmR3aWdodC5lZHWCI3d3dy5jb3Ju
aHVza2VyYmFua3Bvd2VyY2hlY2tpbmcuY29tgg93d3cubWV0ZGhtby5jb22CFGV4
cGVyaWVuY2UuY29rZXIuZWR1gg9pbXVzdGdvLm1odS5lZHWCGmdvLmJlbG1vbnRh
YmJleWNvbGxlZ2UuZWR1ghN3d3cuZmRsY3Jld2FyZHMuY29tghJ3d3cuYXJjZnVs
ZmlsbC5jb22CEyouZ2V0a2FzYXNhY2FzaC5jb22CFyouZ2V0a2FzYXNhY2FzaGJh
Y2suY29tggx3d3cuYzFtbS5jb22CG2xvdWlzaWFuYWNvbGxlZ2VkaWdpdGFsLmNv
bYITc2hvcnRlcnVkaWdpdGFsLmNvbYIQb25lbGltZXN0b25lLmNvbYISd3d3LmV4
cGxvcmVocHUuY29tghV3d3cuZXhwbG9yZWJyZW5hdS5jb22CEnd3dy5leHBsb3Jl
d3djLmNvbYIad3d3LmV4cGxvcmV3ZXN0bWluc3Rlci5jb22CEnd3dy55b3VybG95
b2xhLmNvbYIQd3d3LmdvaHVzc29uLmNvbYIVd3d3LmV4cGxvcmVsZXNsZXkuY29t
ghJ3d3cuZXhwbG9yZWx2Yy5jb22CE3d3dy5kaXNjb3ZlcmFpYy5jb22CGHd3dy55
b3ViZWxvbmdhdHdlbGxzLmNvbYIRd3d3LmdvbmV3bWFudS5jb22CGXd3dy5leHBs
b3JlbmV3Y29sbGVnZS5jb22CFXd3dy50aGlua21lcmVkaXRoLmNvbYIUY29ubmVj
dC5saW5maWVsZC5lZHWCHnd3dy5jaGFtcGlvbnNoaXBjb21taXRtZW50LmNvbYIU
Ki5nZXRrYXNhc2Fsb2Fucy5jb22CE2xpZmVjYWxsLnRydWV0dC5lZHWCFW9wcG9y
dHVuaXR5LnNoYXd1LmVkdYIMd2VhcmUuc3UuZWR1ghV3d3cucG93ZXJjaGVja2lu
Zy5uZXSCFWFwcC5iZWFjb25jb2xsZWdlLmVkdYIRd3d3Lm1idWdpZnRlZC5vcmeC
GmRlc2lnbmVycy5sYXNlcmltYWdlbmMuY29tghNkaXNjb3Zlci5kYWVtZW4uZWR1
ghl3d3cuaGFycnljaGFwaW5zdXJ2ZXkub3JnghBteS5sYW5lcHJlc3MuY29tghZ3
d3cuRnJlc2hzdGFydGZhc3QuY29tghZ3d3cuY2xhcmtoaWdoZXJlZC5pbmZvghZ3
d3cuTmVlZGZyZXNoc3RhcnQuY29tghV3d3cuZXhwbG9yZWFsYmlvbi5jb22CFXd3
dy5kaXNjb3ZlcnVpbmR5LmNvbYIVd3d3LmdvZmxvcmlkYXBvbHkuY29tghR3d3cu
ZGlzY292ZXJzbWNtLmNvbYIUd3d3LmRpc2NvdmVyd2l0dC5jb22CGXd3dy5leHBs
b3JlYmVsbGFybWluZS5jb22CFXd3dy5kaXNjb3ZlcnZhbHBvLmNvbYIYd3d3Lm15
ZWxtc2V4cGVyaWVuY2UuY29tghV3d3cuZXhwbG9yZWRlcGF1dy5jb22CFHd3dy5j
aG9vc2VnYW5ub24uY29tghl3d3cubWFuY2hlc3RlcmJzY2hvb2wuY29tghZ3d3cu
YXVncmFkcHJvZ3JhbXMuY29tghV3d3cuaGFydmFyZGV4dG5vdy5jb22CFHd3dy5w
dGthdGhhcnZhcmQuY29tghd3d3cuc3VtbWVyYXRoYXJ2YXJkLmNvbYIQZm9ybXMu
bWljcm9mLmNvbYIXb25saW5lLm9uZWxpbWVzdG9uZS5jb22CDnJlYWR5Lnh1bGEu
ZWR1ghJ3d3cubmV3cmV6cmVmaS5jb22CE2xpbWVzdG9uZS5lZHVjYXRpb26CFXd3
dy5zdXBwb3J0YnJvb2tlLm9yZ4IYd3d3LmF2aWNhc2lub3Jld2FyZHMuY29tghd3
d3cuY2FzaW5vb2tyZXdhcmRzLmNvbYIjd3d3LmNvbW1lcmNpYWxtYWludGVuYW5j
ZXByb2dyYW0uY2GCGHd3dy5nb2xkcml2ZXJyZXdhcmRzLmNvbYIXd3d3Lmdpdmlu
Z2JhY2tjYW5lcy5jb22CFiouc2hhcmVrYXNhc2Fsb2Fucy5jb22CG2dpdmVhd2F5
cy50aHVtYmNlbGx1bGFyLmNvbYIZd3d3LmFjY2Vzc215Y2FyZG9mZmVyLmNvbYIZ
d3d3LmxpbWVzdG9uZS1kaWdpdGFsLmNvbYIbd3d3LmZhdWFsdW1uaW1lbWJlcnNo
aXAuY29tghN3d3cuYWZnYXJjaGl2ZXMuY29tgg9JZGVudGl0eS5tZGwuaW+CC0Vk
Z2UubWRsLmlvgg1DbGllbnQubWRsLmlvghN3d3cuYnVpbGRpbmdiY3MuY29tghh3
d3cuYmxhY2tiZWFycmV3YXJkcy5jb22CFnd3dy53aW53aXRocmFkaWF0ZS5jb22C
F3RyYW5zZmVydG9saW1lc3RvbmUuY29tghN3d3cuZ2V0dG9rbm93dWQuY29tght0
bWcubGVlaGVhbHRoZm91bmRhdGlvbi5vcmeCEXd3dy5teWNhb2ZmZXIuY29tghd3
d3cuQ2JuQ3MtTWFya2V0aW5nLmNvbYIad3d3LmFrc3RlZWxpbnZlc3RvcmRheS5j
b22CE3d3dy5teW1ldGRlbnRhbC5jb22CFCouZ3VhcmRyZXRlbnRpb24uY29tghMq
Lmd1YXJkb2ZmaWNlcnMuY29tgg8qLmd1YXJkc2ZhYi5jb22CEiouZ3VhcmR3YXJy
YW50LmNvbYIOKi5ndWFyZHJzcC5jb22CEmFmZm9yZG15ZnV0dXJlLmNvbYIOZXhw
bG9yZVRGQy5jb22CFHd3dy5nZXR0b2tub3dwbWkuY29tghB3d3cuRlNHTG9hbnMu
Y29tgg93d3cuRlNHTG9hbi5jb22CFVRyYW5zZmVyVG9DYXRhd2JhLmNvbYITQmVs
b25nQXRDYXRhd2JhLmNvbYIVd3d3LmJlbGxhcm1pbmVhaWQuY29tghkyYmVwcmVw
YXJlZC5wb2ludGxvbWEuZWR1ghhiZXByZXBhcmVkLnBvaW50bG9tYS5lZHWCGXd3
dy5zd2hwYWdlbnRyb2Fkc2hvdy5jb22CIUhJLmxpdmVoZXJlbGVhcm5oZXJlc2Vy
dmVoZXJlLmNvbYIhQ0EubGl2ZWhlcmVsZWFybmhlcmVzZXJ2ZWhlcmUuY29tghVJ
QS5HdWFyZEZhc3RUcmFjay5jb22CGmluZm8ud25lZ29sZGVuYmVhcmNsdWIuY29t
ghBvbndhcmR0by5vd3UuZWR1gg9vbndhcmQyLm93dS5lZHWCHXd3dy5kaWFtb25k
Y3VzdG9tZXJzdXJ2ZXkuY29tghZteUFVc3RvcnkuYW5kZXJzb24uZWR1ghRteXN0
b3J5LmFuZGVyc29uLmVkdYIXd2F0Y2htZWdvMi53YXNoamVmZi5lZHWCFHdhdGNo
bWUud2FzaGplZmYuZWR1ghd3d3cub3BlbnlvdXJtaW5kbm93LmNvbYISY2VudGVy
ZWQuZG9yZHQuZWR1ghRleHBlcmllbmNlLmRvcmR0LmVkdYISZG9uYXRlLm5ld2Fy
a2EuZWR1ghJleHBsb3JlLmNlbnRyZS5lZHWCGXd3dy50aGVhcnRvZmNhbXBhaWdu
cy5jb22CEWRvbmF0ZS5jaGFwaW4uZWR1ghV3d3cuT25NeVdheVRvTkNBVC5jb22C
FHd3dy5Pbk15V2F5Mk5DQVQuY29tghh3d3cuVHJhbnNmZXJNZVRvTkNBVC5jb22C
DmNwY2tuaWdodHMuY29tghJ3d3cuYmhncGF5bWVudC5jb22CEXd3dy5jaG9vc2Vz
Y2MuY29tghVjb25uZWN0LmRlbGJhcnRvbi5vcmeCGnd3dy55b3VycGF0aHRvcG9z
c2libGUuY29tghV3d3cuc3RwcmVzc2V2ZW50cy5jb22CFnlvdXJwbGFjZS5waWVk
bW9udC5lZHWCFHVycGxhY2UucGllZG1vbnQuZWR1ghtkb25hdGUudHJpbml0eXNj
aG9vbG55Yy5vcmeCFWV4cGxvcmV0ZmNkaWdpdGFsLmNvbYITdW5pcXVlbHkuZXVy
ZWthLmVkdYIQbXlsaWZlMi5zZGNjLmVkdYIPbXlsaWZlLnNkY2MuZWR1ghBkaXNj
b3Zlci5lbmMuZWR1ghJ3d3cubXl2YWx1ZWtpdC5jb22CFHd3dy5yaXR0ZXJzb2Zm
ZXIuY29tghd3d3cuZ2l2ZTJncmVlbnZpbGxlLmNvbYIOcmVhbC5kb3JkdC5lZHWC
E2ZpbmRwdXJwb3NlLnN3dS5lZHWCFnd3dy5vcHRpbmJvYmNhdGNjZS5jb22CEXd3
dy5raXQtb2ZmZXIuY29tgg5jc3VwdXJwb3NlLmNvbYIXKi5iaGdwYXRpZW50bGVu
ZGluZy5jb22CFmJldGhlY2hhbmdlLmluZHdlcy5lZHWCECouYmhncHJvY2FyZC5j
b20wggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB2AFWB1MIWkDYBSuoLm1c8U/DA
5Dh4cCUIFy+jqh0HE9MMAAABbt1Gi0kAAAQDAEcwRQIgEuJq79lxnliuB8LmFXXP
xbh2bUKEKZS4z9q2jQfa5Z0CIQCWAPOGxX6Zc7vX2dg9f8zo9KfhEeyOLQsWTwI+
KRuW/gB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbt1GiyYA
AAQDAEYwRAIgfEqnVbsB6PTSxLCPKDdjR+pEusydAlJU1LHAJTBvEvcCID9AOfcv
gzeHVAsH159pzfQqPlFJ1gnRMVVj1Z7cenUzAHUApLkJkLQYWBSHuxOizGdwCjw1
mAT5G9+443fNDsgN3BAAAAFu3UaLPwAABAMARjBEAiBU4oJ6PNE8PwjvD8pfHnDN
02cgwviomrv5d5ICNmftpQIgFrrtO4G9SxpbxWmD2p8zdFRczbVPI0i78xZKEIg2
x3IwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVs
MWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEE
XDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEF
BQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8G
A1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBSaExTbmZgL
ynLFtNJQbmWwqPNJUjAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBx/2dL
REfviu/5Ob6NUewf/HnxMdggar4WlgSgWDYbXJKVTWR3lr3CuouEOSCXrf7eDeTu
kBbaUe48rTD+Oippm4FcexbgPZjrkIzfSTitb7ej2ApR2eCS/+WQw0vafpycaaZ4
uDmI8GEJyO6cEOHnez02UJzTWPfsjk0Sc80D0f4SrNUa7pef71GdHGTIVH8VvPbD
c7Cr/8tZGTHRQTuv/OddYhSiaSFKtgdinUQvS6x6JcLBF0B4P7qSMId9UHnirwXE
iUUbSUSfv87QAy4YhFgj28KJ6WQn68waXnoPntmxNy/ydA2y9LL6zvT6Nj89qdTK
7Vrg5TJWED86R3Xo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5T
aEIIuxqEa/HN0ofFmq/lqtp33ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/
tvS10KhAU2Ffzp1YWoxiFyRXgbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/
qZfsianbV02APBVR/Qfy+FTgAGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgA
rqP/c3JJF17EWopm/EVdFvEBv19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49B
Fm9FujTdykxdvr1q9zNH15NQCB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289776427377067827897318521170174892422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 21:43:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-21 22:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mindfireinc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951563452781109146057106392320226867107000374229101798015474952460603726911991854852083812187781988271179003750789017090612383066931286354568744127269341469194633587084064186594382380309598888000395093878687446126016630170284238938965547827285598923799327864755580089993702511150115546208965454260860994738074217442916082208995375929856279017354403501537507855236546290516823457160534480645279233472204278201703889873993923035009212008348742274919543512527007662929090692110470340849541123982874948530651309660094007907158238537985025279028193304796415915389367590604571312619101468167282531565955541987601938668817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4744 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgo.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-college.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tabor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGProLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothefamily-customerdirect.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcothinkadoptionfirst.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybhgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycapitalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportecfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supporthm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applymjur.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-dv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.lr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grouplegalplanoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investdbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.kewadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspersonal.martinmethodist.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hendrix.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdpnetworkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werhome.oc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobltycarpetone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometoharvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwardsupdate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promise.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinfo.cps.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin.onestarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGPersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belongat.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firespringpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymccalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DiscoverLACollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulknerlawschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverShorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BPCforMe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransfertoMC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'YourMCcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bstrong.wtamu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiontosucceed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpc4cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsacredheartgreenwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dwight.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornhuskerbankpowerchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metdhmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imustgo.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.belmontabbeycollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcfulfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacashback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianacollegedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorterudigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorehpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebrenau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewestminster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourloyola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gohusson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveraic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youbelongatwells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonewmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorenewcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.linfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifecall.truett.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.shawu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weare.su.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerchecking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.beaconcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbugifted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designers.laserimagenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.daemen.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrychapinsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lanepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Freshstartfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarkhighered.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Needfreshstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorealbion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveruindy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gofloridapoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoversmcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoverwitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebellarmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovervalpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myelmsexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exploredepauw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosegannon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchesterbschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augradprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvardextnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptkatharvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summeratharvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.microf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ready.xula.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrezrefi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limestone.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportbrooke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avicasinorewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinookrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialmaintenanceprogram.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldriverrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingbackcanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharekasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveaways.thumbcellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessmycardoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limestone-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faualumnimembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afgarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Identity.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Edge.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Client.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildingbcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackbearrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winwithradiate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfertolimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettoknowud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmg.leehealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycaoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.CbnCs-Marketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aksteelinvestorday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymetdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardretention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardofficers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardsfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardwarrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardrsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordmyfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploreTFC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettoknowpmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.FSGLoans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.FSGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransferToCatawba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BelongAtCatawba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellarmineaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2beprepared.pointloma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beprepared.pointloma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swhpagentroadshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HI.liveherelearnhereservehere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CA.liveherelearnhereservehere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'IA.GuardFastTrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.wnegoldenbearclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwardto.owu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onward2.owu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondcustomersurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myAUstory.anderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystory.anderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchmego2.washjeff.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchme.washjeff.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openyourmindnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centered.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.newarka.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartofcampaigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.chapin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.OnMyWayToNCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.OnMyWay2NCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TransferMeToNCAT.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosescc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.delbarton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourpathtopossible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpressevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourplace.piedmont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urplace.piedmont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.trinityschoolnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploretfcdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniquely.eureka.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylife2.sdcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylife.sdcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.enc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvaluekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rittersoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.give2greenville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'real.dordt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findpurpose.swu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optinbobcatcce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kit-offer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csupurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhgpatientlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethechange.indwes.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhgprocard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1314db99980bca72c5b4d2506e65b0a8f34952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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