mail.cambiumlearning.com

- Cambium Learning Group, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 31:20:96:08:1d:10:ab:e7:00:00:00:00:50:e2:f8:36 was issued on by Entrust, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cambium Learning Group, Inc.

Organization: Cambium Learning Group, Inc.
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 31:20:96:08:1d:10:ab:e7:00:00:00:00:50:e2:f8:36
Serial Number (int): 65301368297195060004877107469725399094
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 82:e4:95:41:02:e6:26:8f:84:6f:7c:c7:8e:48:a2:96:be:7a:f5:48
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b8:54:70:b6:7b:3a:04:b1:e6:bd:b8:51:2b:97:f9:25:ca:cb:37:8a
Fingerprint (sha256): 4d:48:a4:a4:58:1a:3d:d2:88:05:ad:7a:76:e4:10:53:cc:75:96:2b:15:3f:3a:15:9f:38:f2:ea:6f:3b:d6:3d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mail.cambiumlearning.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.cambiumlearning.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cambiumlearning.com
autodiscover.kurzweiledu.com
autodiscover.voyagersopris.com
autodiscover.explorelearning.com
autodiscover.learninga-z.com
autodiscover.cambiumlearning.com

Other certificates including the domain name cambiumlearning.com

(limited to 100 certificates)
mail.cambiumlearning.com
unanet.cambiumlearning.com
unanet.cambiumlearning.com
dev.unanet.cambiumlearning.com
mail.cambiumlearning.com
qa.kws.cambiumlearning.com
email2.cambiumlearning.com
edi.cambiumlearning.com
kws.cambiumlearning.com
sso.cambiumlearning.com
vpntest.mi.cambiumlearning.com
support.cambiumlearning.com
secure.cambiumlearning.com
support.cambiumlearning.com
sslvpn.cambiumlearning.com
support.cambiumlearning.com
zabbix.mi.cambiumlearning.com
sslvpn.cambiumlearning.com
*.cambiumlearning.com
secure.cambiumlearning.com
mail.cambiumlearning.com
ftp2.cambiumlearning.com
unanet.cambiumlearning.com
*.cambiumlearning.com
connect.cambiumlearning.com
kws.cambiumlearning.com
mail.cambiumlearning.com
unanet.cambiumlearning.com
micucmsub.cambiumlearning.com
micucmsub.cambiumlearning.com
store.cambiumlearning.com
sslvpn.cambiumlearning.com
unanet.cambiumlearning.com
vpntest.mi.cambiumlearning.com
kws.cambiumlearning.com
backup.cambiumlearning.com
ingenius.cambiumlearning.com
unanet.cambiumlearning.com
miucmraexpe.cambiumlearning.com
mail.cambiumlearning.com
ingenius.cambiumlearning.com
dev.ingenius.cambiumlearning.com
store.cambiumlearning.com
sslvpn.cambiumlearning.com
*.cambiumlearning.com
mail.cambiumlearning.com
sslvpn.cambiumlearning.com
qa.kws.cambiumlearning.com
zabbix.tx.cambiumlearning.com
unanet.cambiumlearning.com
unanet.cambiumlearning.com
sso.cambiumlearning.com
as2.cambiumlearning.com
lab.ingenius.cambiumlearning.com
edi.cambiumlearning.com
email.cambiumlearning.com
store.cambiumlearning.com
pre.edi.cambiumlearning.com
txucmraexpe.cambiumlearning.com
zabbix.tx.cambiumlearning.com
backup.cambiumlearning.com
lab.ingenius.cambiumlearning.com
voip.cambiumlearning.com
micucmsub.cambiumlearning.com
vpntest.mi.cambiumlearning.com
store.cambiumlearning.com
*.cambiumlearning.com
store.cambiumlearning.com
support.cambiumlearning.com
store.cambiumlearning.com
vpntest.mi.cambiumlearning.com
*.cambiumlearning.com
sso.cambiumlearning.com
unanet.cambiumlearning.com
vpntest.mi.cambiumlearning.com
support.cambiumlearning.com
sslvpn.cambiumlearning.com
mail.cambiumlearning.com
support.cambiumlearning.com
micucmsub.cambiumlearning.com
*.cambiumlearning.com
Unity.cambiumlearning.com
ingenius.cambiumlearning.com
mail.cambiumlearning.com
mail.cambiumlearning.com
as2.cambiumlearning.com
unanet.cambiumlearning.com
txucmraexpe.cambiumlearning.com

Certificate

The complete raw certificate details for mail.cambiumlearning.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgIQMSCWCB0Qq+cAAAAAUOL4NjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA1MjIwMDM0NDJaFw0yMDA4MDIwMTA0NDBaMHgxCzAJBgNVBAYTAlVTMQ4wDAYD
VQQIEwVUZXhhczEPMA0GA1UEBxMGRGFsbGFzMSUwIwYDVQQKExxDYW1iaXVtIExl
YXJuaW5nIEdyb3VwLCBJbmMuMSEwHwYDVQQDExhtYWlsLmNhbWJpdW1sZWFybmlu
Zy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQm1SVLc98l9/
PdlG3Gu1jBpkYU8/gPkS9PxVKsrOWyHhAPePpP3qRpDcMGYjh86eS+2jPJ2ztCnp
w4vOERiDQi5QNWzLZeRCXC4K2VLF5MWwwZZSWIDnOefz8rod5vdbaDlkix95NJup
zvbeV5ip4SZJhD0rrVvVRZbDdh1yJ0uTJkIZ7M+Ijriyi3Gufspqw55MHhdaZknI
+Upnil26ao1kCbGQyOcUQTqm04K22OPU2JTP35v9fwVUfou+PnElctyB1z5MYXh7
urdHbQSESBV7H5se/0+inVgmke9dZb9DZAGlAzNczec9BfEJBYrE4KxjFQRFuGak
LNTmpz8bAgMBAAGjggJHMIICQzATBgorBgEEAdZ5AgQDAQH/BAIFADCBxQYDVR0R
BIG9MIG6ghhtYWlsLmNhbWJpdW1sZWFybmluZy5jb22CHGF1dG9kaXNjb3Zlci5r
dXJ6d2VpbGVkdS5jb22CHmF1dG9kaXNjb3Zlci52b3lhZ2Vyc29wcmlzLmNvbYIg
YXV0b2Rpc2NvdmVyLmV4cGxvcmVsZWFybmluZy5jb22CHGF1dG9kaXNjb3Zlci5s
ZWFybmluZ2Etei5jb22CIGF1dG9kaXNjb3Zlci5jYW1iaXVtbGVhcm5pbmcuY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
MwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFr
LmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0
cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFww
WjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUH
MAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNV
HSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUguSVQQLmJo+E
b3zHjkiilr569UgwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAUqPrPMi2
mx7FjNarzHkl6tnY4cvDVgFbW/kCz1MRFNbgVDFyVn5TaHHMtinniHap0rRnF7yi
IYuV2HN7zUDEKNBw9kyI8c+H4DvOohNZwglkS1s9EfOMJix45EVToc8rgrvapr+P
fQtwJiPWeG1oHBF9REjXw4WwAam5De85HUR3iXVRFWiHi9Py7OcS9vVX2bVI38dZ
CMElo/7s3cc/hYvthQJXv/qELktmGJ8q+pm/vSb0QJgGdzTGRv0LnQpDmrhRjltf
aYCXDdlJcdtrLaSjldp98og9awR8rYLblsjCXrbb3IWHiVZhQ1lEymvRJeqn2y7A
FzW5I2Tb0JmMgw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUJtUlS3PfJffz3ZRtxr
tYwaZGFPP4D5EvT8VSrKzlsh4QD3j6T96kaQ3DBmI4fOnkvtozyds7Qp6cOLzhEY
g0IuUDVsy2XkQlwuCtlSxeTFsMGWUliA5znn8/K6Heb3W2g5ZIsfeTSbqc723leY
qeEmSYQ9K61b1UWWw3YdcidLkyZCGezPiI64sotxrn7KasOeTB4XWmZJyPlKZ4pd
umqNZAmxkMjnFEE6ptOCttjj1NiUz9+b/X8FVH6Lvj5xJXLcgdc+TGF4e7q3R20E
hEgVex+bHv9Pop1YJpHvXWW/Q2QBpQMzXM3nPQXxCQWKxOCsYxUERbhmpCzU5qc/
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65301368297195060004877107469725399094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 00:34:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-02 01:04:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambium Learning Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.cambiumlearning.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19852170272719881344187117807074068142227963844890841500676934311163179447474573741098186195562952476047490124689686802828980353069699930937023474790990569121457956755146325440262354273163151762416585227501183498073510402704999635458607551504455883388911542205149235343610015803736962331072510892196452167957455136381274240653279811682068353045723628659125110185144471444660466513331044548183618918647337290313822437658684235824732632361375876226403703425794857937152674974244709566490391135228435310793431322292068713548662602887463138706069927175322986845602695061486667487326263066514008318645944069731456909786907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cambiumlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kurzweiledu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.voyagersopris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.explorelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.learninga-z.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cambiumlearning.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82e4954102e6268f846f7cc78e48a296be7af548
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052a3eb3cc8b69b1ec58cd6abcc7925ead9d8e1cbc356015b5bf902cf531114d6e0543172567e536871ccb629e78876a9d2b46717bca2218b95d8737bcd40c428d070f64c88f1cf87e03bcea21359c209644b5b3d11f38c262c78e44553a1cf2b82bbdaa6bf8f7d0b702623d6786d681c117d4448d7c385b001a9b90def391d44778975511568878bd3f2ece712f6f557d9b548dfc75908c125a3feecddc73f858bed850257bffa842e4b66189f2afa99bfbd26f44098067734c646fd0b9d0a439ab8518e5b5f6980970dd94971db6b2da4a395da7df2883d6b047cad82db96c8c25eb6dbdc8587895661435944ca6bd125eaa7db2ec01735b92364dbd0998c83