qa-www.donegalgroup.com

- Donegal Insurance Group -

Issued by Entrust Certification Authority - L1B

About this certificate

This digital certificate with serial number 48:0d:d7:27 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Donegal Insurance Group

Organization: Donegal Insurance Group
Organization unit: Database Services
State / Province: PENNSYLVANIA
Locality: Marietta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE
Organization unit: CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY
Organization unit: www.entrust.net/CPS is incorporated by reference
Organization unit: (c) 2008 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:0d:d7:27
Serial Number (int): 1208866599
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: c6:29:f5:56:02:92:1d:c0:aa:cd:ba:ca:c6:7b:a0:77:2d:a1:a4:0a
AuthorityKeyId: f5:f2:96:88:7d:0d:f3:2a:f9:4e:e7:34:a0:bd:46:7e:13:d6:16:c8

Fingerprint (sha1): 67:aa:1e:a0:d9:93:6b:c6:52:16:e0:74:71:13:7f:6a:64:1e:2c:4a
Fingerprint (sha256): 4d:73:ba:65:ae:a5:b7:ab:d5:2d:1a:56:d6:5f:ce:c7:61:de:f0:f6:ec:c7:7a:2f:f7:af:4e:9e:a8:20:9d:9f

Issuing Certificate URL: http://aia.entrust.net/2048-l1b.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1b.crl

Check the revocation status for certificate qa-www.donegalgroup.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-www.donegalgroup.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name donegalgroup.com

(limited to 100 certificates)
qa-user.donegalgroup.com
test-gw-lem-iso.donegalgroup.com
www.donegalgroup.com
test-www.donegalgroup.com
test-qtest-jira.donegalgroup.com
test-cdn.donegalgroup.com
esig.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
selfservice.donegalgroup.com
pilotprod-writebiz.donegalgroup.com
test-www.donegalgroup.com
test-external-ws.donegalgroup.com
sharepoint.donegalgroup.com
test-vueapp2.donegalgroup.com
test-qtest-jira.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
guestportal.donegalgroup.com
qa-external-ws.donegalgroup.com
www.donegalgroup.com
ts-test.donegalgroup.com
test-mobile.donegalgroup.com
mobile.donegalgroup.com
qa-user.donegalgroup.com
test-www.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
test-vueapp.donegalgroup.com
writebiz.donegalgroup.com
test-www.donegalgroup.com
my.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
test-wsag.donegalgroup.com
nautilus.donegalgroup.com
dmi-frw-barracuda.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
qa-www.donegalgroup.com
writebiz.donegalgroup.com
qa-cdn.donegalgroup.com
test-www.donegalgroup.com
test-digportal.donegalgroup.com
vue.donegalgroup.com
api.donegalgroup.com
api.donegalgroup.com
vpn-dr.donegalgroup.com
qa-www.donegalgroup.com
pas.donegalgroup.com
test-user.donegalgroup.com
pas.donegalgroup.com
sso.donegalgroup.com
writebiz.donegalgroup.com
expressway1pri.donegalgroup.com
qa-external-ws.donegalgroup.com
test-writepro.donegalgroup.com
prod-qtest-jira.donegalgroup.com
test-external-ws.donegalgroup.com
esig.donegalgroup.com
qa-user.donegalgroup.com
test-writebiz.donegalgroup.com
test-wbportal.donegalgroup.com
qa-cdn.donegalgroup.com
qa-www.donegalgroup.com
mergers.donegalgroup.com
wbportal.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
teradiciconsole.donegalgroup.com
remotedesktop.donegalgroup.com
smtp.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
wb-portal.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
cdn.donegalgroup.com
test-user.donegalgroup.com
www.donegalgroup.com
isosearchtst.donegalgroup.com
ts-test.donegalgroup.com
expressway1sec.donegalgroup.com
test-vue.donegalgroup.com
test-gw-symbility.donegalgroup.com
perf-vueapp2.donegalgroup.com
qa-user.donegalgroup.com
writepro.donegalgroup.com
www.donegalgroup.com
perf-www.donegalgroup.com
test-user.donegalgroup.com
losscontrol.donegalgroup.com
director.donegalgroup.com
test-wsag.donegalgroup.com
losscontrol.donegalgroup.com
cdn.donegalgroup.com
seg.donegalgroup.com
ts-prod.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
external-ws.donegalgroup.com
www.donegalgroup.com
test-vue2.donegalgroup.com
writebizqa.donegalgroup.com
cdn.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
writepro.donegalgroup.com
user.donegalgroup.com
www.donegalgroup.com

Certificate

The complete raw certificate details for qa-www.donegalgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLuwJC+KQKs3Es9L9YzK4Q1E3O
Rjs4lFONC7CVVyXyaS65hXZoelZP74pPUClHpxLLHu6l18K90UwxAkWl6ch1HoD9
8ChJFVJWRZOOAF80xaHZxSx6q9Gml5UEXBlyZftcQbSyORDMDul25C2l+hOzAZ8Z
Mrt8H8S16EzzpkpgowIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208866599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/CPS is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2008 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1B'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-08-17 12:56:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-17 13:26:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PENNSYLVANIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marietta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Donegal Insurance Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Database Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-www.donegalgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 143064424637275267724173213500796158584842171918907701509388346753628229561694379873248704289740704094164483397393144913418353916883447446009846476985221781211962394350666936515516336479219007287647509095079813577220782704928356353093557072933149083311405260093967892854594453436565362499105700336518398894243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.16 (privateKeyUsagePeriod)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 32303039303831373132353632385a
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '20110817132626Z'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1b.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 69 110 116 114 117 115 116 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 97 118 97 105 108 97 98 108 101 32 97 116 32 119 119 119 46 101 110 116 114 117 115 116 46 110 101 116 47 99 112 115 32 32 105 115 32 104 101 114 101 98 121 32 105 110 99 111 114 112 111 114 97 116 101 100 32 105 110 116 111 32 121 111 117 114 32 117 115 101 32 111 114 32 114 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 67 101 114 116 105 102 105 99 97 116 101 46 32 32 84 104 105 115 32 67 80 83 32 99 111 110 116 97 105 110 115 32 108 105 109 105 116 97 116 105 111 110 115 32 111 110 32 119 97 114 114 97 110 116 105 101 115 32 97 110 100 32 108 105 97 98 105 108 105 116 105 101 115 46 32 67 111 112 121 114 105 103 104 116 32 40 99 41 32 50 48 48 56 32 69 110 116 114 117 115 116 32 76 105 109 105 116 101 100]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5f296887d0df32af94ee734a0bd467e13d616c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c629f55602921dc0aacdbacac67ba0772da1a40a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.65.0 (entrustVersInfo)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:27|false] GeneralString 'V7.1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
								0328
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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