www.test-smartdata.lloydsbankcommercial.com

- MasterCard International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b0:65:62:77:69:c9:8c:b4:00:00:00:00:50:e6:42:50 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MasterCard International

Organization: MasterCard International
Organization unit: BIP01 AIDC
Locality: Waterloo
Country: BE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b0:65:62:77:69:c9:8c:b4:00:00:00:00:50:e6:42:50
Serial Number (int): 234470546377889292855414650900572422736
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: dd:4b:bb:8c:53:66:02:92:27:4a:c5:66:75:00:83:94:e2:c7:44:63
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6c:2c:7d:6b:09:7c:cb:33:e4:c6:39:08:a5:d0:6c:e6:57:3a:ff:9c
Fingerprint (sha256): 4d:15:e5:c0:92:2a:63:ea:46:c2:09:1f:c3:56:a0:c5:65:1d:52:33:04:13:80:03:df:d7:bc:15:e4:03:6b:dd

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.test-smartdata.lloydsbankcommercial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.test-smartdata.lloydsbankcommercial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.test-smartdata.lloydsbankcommercial.com

Other certificates including the domain name lloydsbankcommercial.com

(limited to 100 certificates)
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
lloydsbankcommercial.com
amconline.co.uk
volunteering.lloydsbankinggroup.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
www.lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.epayvirtual.lloydsbankcommercial.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
www.prepaid.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
international.lloydsbank.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
amconline.co.uk
sdg2demo.commerzbank.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
amconline.co.uk
amconline.co.uk
www.amconline.co.uk
sdg2.comdata.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
customerservice.lloydsbankcommercial.com
sdg2.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.lloydsbankcommercial.com
amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
www.test-smartdata.lloydsbankcommercial.com
www.lloydsbankcommercial.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
sdg2.comdata.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
customerservice.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
mcincontrol.mastercard.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.test-smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
dcsrd-prod-01.lloydsbanking.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
blog.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
touchpoint.lloydsbankcommercial.com
international.lloydsbank.com
international.lloydsbank.com
lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
www.amconline.co.uk
international.lloydsbank.com

Certificate

The complete raw certificate details for www.test-smartdata.lloydsbankcommercial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHaTCCBlGgAwIBAgIRALBlYndpyYy0AAAAAFDmQlAwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTgwODE2MTI1MTEzWhcNMjAxMTE1MTMyMTEyWjCBjjELMAkGA1UEBhMCQkUxETAP
BgNVBAcTCFdhdGVybG9vMSEwHwYDVQQKExhNYXN0ZXJDYXJkIEludGVybmF0aW9u
YWwxEzARBgNVBAsTCkJJUDAxIEFJREMxNDAyBgNVBAMTK3d3dy50ZXN0LXNtYXJ0
ZGF0YS5sbG95ZHNiYW5rY29tbWVyY2lhbC5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYm1+EnECCsShHhYPUDKh+IIwwTpobXzZFZDSZ3LJLHmQ2
H/G1wIb/zp9nItODG1CGY8qM3RLYOdhrNk+NaQuvROYAXFVmxHdrqcnhO3jkIT/+
xS00NXUF0LK6ynvtln7CNNtUeVAqMQmiCtkSi2bEqFtqyD3HTnddL49Rs0/nKmAC
XDiG18qUsMoP2ZpaYKYS1jUFlkTupPtz5f5biezbAyei2nNgZ6oQVsoWM6OKy9Wj
bJjhJTB86EgDZyyR4YTHovnIkR0jg8nZ+Ud54XK6PCkgYjxHlCczXB8g+WUJTWk5
jYSOxDwJnrUMA63m8PHk5JWyssJweHcMcsR8i4BtAgMBAAGjggOSMIIDjjA2BgNV
HREELzAtgit3d3cudGVzdC1zbWFydGRhdGEubGxveWRzYmFua2NvbW1lcmNpYWwu
Y29tMIIB9gYKKwYBBAHWeQIEAgSCAeYEggHiAeAAdgBVgdTCFpA2AUrqC5tXPFPw
wOQ4eHAlCBcvo6odBxPTDAAAAWVC5bEhAAAEAwBHMEUCIH1dXwkVfIomt0MF+cYh
A2Mn+9so84afWGEi16SKYJ7IAiEAtaOAm178WyO9h2TITBIWnIx6VIjhn+VbA0Bo
p+8fWG4AdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWVC5bFf
AAAEAwBHMEUCIESW0+lGP+bBG2u8U0DzcDWgvWG5LJY37D31u2GhOlmtAiEAwbmF
a3gCCg9TzhXtQvhWQ+wOYpA3QdDFK8DXuPIKf8gAdgBWFAaaL9fC7NP14b1Esj7H
Rna5vJkRXMDvlJhV1onQ3QAAAWVC5bFrAAAEAwBHMEUCIQDGnUGDjzn3O7COIKhd
sVaXk0WhhkdpHIE0enDKpOqz9wIgMR5v59RVjSq5pPWIUppyy70Mc8wEjGtpk0K/
n+kLsLAAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWVC5bFz
AAAEAwBHMEUCIQD7peO64Z96ebHWtjTtoHkmA+T5K120Y4KUu48JTfOc2gIgBh4Y
/lwJMYr+GuX615QnXZA/IwjbhWDx/isnpIw6EncwDgYDVR0PAQH/BAQDAgWgMBMG
A1UdJQQMMAoGCCsGAQUFBwMBMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwu
ZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEF
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeB
DAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVu
dHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wx
ay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8w
HQYDVR0OBBYEFN1Lu4xTZgKSJ0rFZnUAg5Tix0RjMAkGA1UdEwQCMAAwDQYJKoZI
hvcNAQELBQADggEBALrNBx6PwHQgpVpJRtfbOPkUwTvz5N9im5fLmjENgvxcRleG
vhZEvQqHsXC9/5Qy2iGjscWLTkRA8JX8R9Z3yS5AXFlCGpGiekuDxgCzhxXdOKof
bxJfPUGTEUw1NnVr8FXocnflkN5fzCXJw8OBVtg7hJ+1r888KZYHtOmce/sUi9Ou
UWL8aYfhbRPlBJnJXOpB6aTHAXdQL+nsEYEbd0e5R5jaebmTpG7TE4DF13+Uc4Oo
xeOIMhhv5J94g204xk6xcrYpSrTn/MQnjLLVDlszg6z0+7YvR+UweJyLutnmyxn4
WEePNGPNFWLdCW08Q9hukgUbNNr202IQcah5VFg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JtfhJxAgrEoR4WD1Ayo
fiCMME6aG182RWQ0mdyySx5kNh/xtcCG/86fZyLTgxtQhmPKjN0S2DnYazZPjWkL
r0TmAFxVZsR3a6nJ4Tt45CE//sUtNDV1BdCyusp77ZZ+wjTbVHlQKjEJogrZEotm
xKhbasg9x053XS+PUbNP5ypgAlw4htfKlLDKD9maWmCmEtY1BZZE7qT7c+X+W4ns
2wMnotpzYGeqEFbKFjOjisvVo2yY4SUwfOhIA2cskeGEx6L5yJEdI4PJ2flHeeFy
ujwpIGI8R5QnM1wfIPllCU1pOY2EjsQ8CZ61DAOt5vDx5OSVsrLCcHh3DHLEfIuA
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 234470546377889292855414650900572422736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 12:51:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 13:21:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MasterCard International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIP01 AIDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.test-smartdata.lloydsbankcommercial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27344091212338925992217093390766402966368811061211059534886556752064870751402969294622488587306464183484460966282728215826240923620686584859893301677377609019891116415196906341337961076048356025735589805714370962168766644478403460798363458731512272591356328610780497682001511931135014572468732951450990954009034303657969415260799491790993341945183691528819448162095118245124536025969934864303475938374504890400642883003915001430181176511463112828224033287374148346543142770490713757393828329612789145337083475909941640516633665098002240131317929764162746844039695767146168250067231416545142549385419107582679444062317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-smartdata.lloydsbankcommercial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd4bbb8c53660292274ac56675008394e2c74463
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bacd071e8fc07420a55a4946d7db38f914c13bf3e4df629b97cb9a310d82fc5c465786be1644bd0a87b170bdff9432da21a3b1c58b4e4440f095fc47d677c92e405c59421a91a27a4b83c600b38715dd38aa1f6f125f3d4193114c3536756bf055e87277e590de5fcc25c9c3c38156d83b849fb5afcf3c299607b4e99c7bfb148bd3ae5162fc6987e16d13e50499c95cea41e9a4c70177502fe9ec11811b7747b94798da79b993a46ed31380c5d77f947383a8c5e38832186fe49f78836d38c64eb172b6294ab4e7fcc4278cb2d50e5b3383acf4fbb62f47e530789c8bbad9e6cb19f858478f3463cd1562dd096d3c43d86e92051b34daf6d3621071a8795458