xnexsvr1t0.opr.statefarm.org

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6a:7c:a6:96:5e:c6:3d:bc:00:00:00:00:50:f7:ba:ea was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:7c:a6:96:5e:c6:3d:bc:00:00:00:00:50:f7:ba:ea
Serial Number (int): 141545391157209234238515818153679239914
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2b:10:88:96:fc:41:5f:85:5d:f7:a5:58:1b:c4:48:d8:07:6b:4a:b7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 43:6e:ea:45:bf:04:9c:26:4a:f9:33:60:f6:bf:11:3c:7c:26:b9:5a
Fingerprint (sha256): 51:38:20:79:9d:b1:76:a0:e3:23:91:40:32:b2:03:23:85:64:51:ef:27:5e:c4:06:32:26:35:ba:11:ac:33:44

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate xnexsvr1t0.opr.statefarm.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xnexsvr1t0.opr.statefarm.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xnexsvr1t0.opr.statefarm.org
nexus-iq.opr.test.statefarm.org
nexus-iq-dotnet.opr.test.statefarm.org
nexus-iq-sandbox.opr.test.statefarm.org

Other certificates including the domain name statefarm.org

(limited to 100 certificates)
ex90dev1vin2.statefarm.com
SFHumanaTest.statefarm.org
servicejourney.env2.pcmngd01.test.ic1.statefarm
sfmeet.statefarm.com
uc71bse1.opr.test.statefarm.org
expw-e53.statefarm.com
mft.statefarm.com
wtsfk9c5.opr.system.test.statefarm.org
test.statefarm.com
vcse-rdc.statefarm.com
sfpcinfra-sbx-mc.pcmngd02.test.ic1.statefarm
GuestInternet2.opr.statefarm.org
testcenterdev.statefarm.com
iwhrdir.statefarm.com
fcm.cfpa.test.ic1.statefarm
access-o.statefarm.com
WPSFCP7Y.opr.statefarm.org
access-o.statefarm.com
iwhrdir.statefarm.com
iwh.statefarm.com
sfmeet.statefarm.com
wtsfk88b.unitopr.unitint.test.statefarm.org
credentialretrieval.appquote.test.ic1.statefarm
sfap71pkiaasedmpoc.opr.test.statefarm.org
test.statefarm.com
sf-accenture-sops.opr.statefarm.org
statefarm.com
smft.tcidv.statefarm.com
smft.tcidv.statefarm.com
*.paasutil.test.ic1.statefarm
ap71ucegw2.opr.test.statefarm.org
sfgitlab.opr.test.statefarm.org
vcse-rdc.statefarm.com
sf.venfi.statefarm.org
WTSD6BYH.UNITOPR.UNITINT.TEST.STATEFARM.ORG
sf-velocloud-public.statefarm.com
requestdelete.appquote.test.ic1.statefarm
WTSFK88B.unitopr.unitint.test.statefarm.org
servicejourney.env6.pcmngd01.test.ic1.statefarm
quoteretrievalsvc.appquote.ic1.statefarm
guestcert-w.wg-iscw.statefarm.org
Guestinternet2.opr.statefarm.org
servicejourney.env8.pcmngd01.test.ic1.statefarm
iwh.statefarm.com
guestinternet-sim.opr.statefarm.org
iwh.statefarm.com
*.paasutil.test.ic1.statefarm
iwhrdir.statefarm.com
iwhrdir.statefarm.com
sf-accenture-sops.opr.statefarm.org
access.tcisp.statefarm.com
access-r-ng.statefarm.com
WTSFK88F.unitopr.unitint.test.statefarm.org
SFHumana.statefarm.org
WPSFCP7W.opr.statefarm.org
keith22.test.statefarm.org
guestinternet-dev.opr.statefarm.org
WTSFK876.unitopr.unitint.test.statefarm.org
uc71bse2.opr.test.statefarm.org
portal.opr.statefarm.org
expw-e56.statefarm.com
sfap95cr001.opr.test.statefarm.org
xnexsvr1t0.opr.statefarm.org
maven-nexus.opr.statefarm.org
sfmediacenter.createsvc.ic1.statefarm
sf-attsdwan2.opr.statefarm.org
xnexsvr1p0.opr.statefarm.org
access-r.statefarm.com
xdocker1pq.opr.statefarm.org
appretrieval.sys.appquote.test.ic1.statefarm
xnexsvr1t0.opr.test.statefarm.org
guestcert-corp.wg-corp.statefarm.org
maven.nexus.opr.statefarm.org
WPSFCP7R.opr.statefarm.org
wtsfk879.unitopr.unitint.test.statefarm.org
nexus.opr.test.statefarm.org
devchat.opr.test.statefarm.org
keith.test.statefarm.org
sfap71pkiaasedmpoc.opr.test.statefarm.org
ui.bundle.test.c1.statefarm
WTSFK879.unitopr.unitint.test.statefarm.org
*.paasutil.test.ic1.statefarm
iwh.statefarm.com
guestcert-corp.wg-corp.statefarm.org
statefarm.com
test.statefarm.com
*.statefarm.org
azure.sync.statefarm.org
iwh.statefarm.com
iwh.statefarm.com
vault.opr.statefarm.org
fai.cfpa.test.ic1.statefarm
iwh.statefarm.com
WPSFCP7Z.opr.statefarm.org
sfap95cr101.opr.test.statefarm.org
ui.bundle.c1.statefarm
statefarm.com
lt00es00.opr.statefarm.org
keith.test5.statefarm.org
statefarm.com

Certificate

The complete raw certificate details for xnexsvr1t0.opr.statefarm.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIQanymll7GPbwAAAAAUPe66jANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
OTA5MjUxNDA2NTVaFw0yMDA5MjUxNDM2NTRaMIGWMQswCQYDVQQGEwJVUzERMA8G
A1UECBMISWxsaW5vaXMxFDASBgNVBAcTC0Jsb29taW5ndG9uMTcwNQYDVQQKEy5T
dGF0ZSBGYXJtIE11dHVhbCBBdXRvbW9iaWxlIEluc3VyYW5jZSBDb21wYW55MSUw
IwYDVQQDExx4bmV4c3ZyMXQwLm9wci5zdGF0ZWZhcm0ub3JnMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEpJBK89rdNjQYxtRfnT4x/9w4hR6KSumhfP
JVBR+EPifmh1zxza9hTwnHL7/f/i42uWrZliYz7GaswYalSQwWYrC3dx7lG5H6BC
puOA3/Vy2bRdDUtOVQH1wma12auYzwI8eZUI/r40PJRu+BWwX4MtSyHsZrBHankm
abJv6tMdgl4oSFtRvQQE6l8BdxsOYb0Tipfb8gg/eW2GnoI++YTHApSbfzKxLrce
HSPFhSXdiuJhrkEAM6ns5LEFZk4M6or84MCz3hDYIwse92FciRhVeIok78PaNDtG
KjoKsSQxLNm9jJeJowdzIcqpqMphNJCsjeJoOyWvNczSz2MvUwIDAQABo4ICHTCC
AhkwEwYKKwYBBAHWeQIEAwEB/wQCBQAwgZsGA1UdEQSBkzCBkIIceG5leHN2cjF0
MC5vcHIuc3RhdGVmYXJtLm9yZ4IfbmV4dXMtaXEub3ByLnRlc3Quc3RhdGVmYXJt
Lm9yZ4ImbmV4dXMtaXEtZG90bmV0Lm9wci50ZXN0LnN0YXRlZmFybS5vcmeCJ25l
eHVzLWlxLXNhbmRib3gub3ByLnRlc3Quc3RhdGVmYXJtLm9yZzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCow
KKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0g
BEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50
cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8v
YWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJw
dN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFCsQiJb8QV+FXfelWBvESNgHa0q3
MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAM4rOoldDky5C4kC94Hw+/SQ
ike4tSpE9QFDAdXhEHpL8X0yuOHqpHMAJxrwtLmv2gKpzGKduEWjeD2tNvYcwlgh
ipjZ7R4iiKpoEZeUgp4SfJrkMkjM4wD55xw2M44PlCME3eTg3B+XU/6irCBkKSVo
2a5csOXbwOGdl9CNngweZvjvPzKsnj7RWsYWJXaz41MMGXgawxipB/z68Zu4EW+E
Op9pIJDaCsqH8lf+N1EFfrGFnroJN1JW1YrO1uP0NJkKL3CKhDyXzKtRv6T0oTfJ
yiDliQuvhUiHBzaG5PA6ilWBz2PG56K6+Vosbeg3h9wwe82eSK2n06KKQZNYwx0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEpJBK89rdNjQYxtRfnT
4x/9w4hR6KSumhfPJVBR+EPifmh1zxza9hTwnHL7/f/i42uWrZliYz7GaswYalSQ
wWYrC3dx7lG5H6BCpuOA3/Vy2bRdDUtOVQH1wma12auYzwI8eZUI/r40PJRu+BWw
X4MtSyHsZrBHankmabJv6tMdgl4oSFtRvQQE6l8BdxsOYb0Tipfb8gg/eW2GnoI+
+YTHApSbfzKxLrceHSPFhSXdiuJhrkEAM6ns5LEFZk4M6or84MCz3hDYIwse92Fc
iRhVeIok78PaNDtGKjoKsSQxLNm9jJeJowdzIcqpqMphNJCsjeJoOyWvNczSz2Mv
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141545391157209234238515818153679239914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 14:06:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-25 14:36:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xnexsvr1t0.opr.statefarm.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23264479524819999365343058967587196540757323009413087650297700866133777945175195677038194454246251441329494137549497996909167424931345942567221398803473400214565637058793528796841069783701622309654350570279006740293899974462539543122204288717308654414248021474253059631846114446378569357259264794237682811032960143455573946273022097033077677945283998870047926658311875698650473075228517916336527211645481177463758530917336113170601558364526945261198378813542099673188153784904780201081216690420937388691885487520157524033289293461355517819450231250523480556288611051302761523947772922048050657362488163045614685466451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnexsvr1t0.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus-iq.opr.test.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus-iq-dotnet.opr.test.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus-iq-sandbox.opr.test.statefarm.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b108896fc415f855df7a5581bc448d8076b4ab7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ce2b3a895d0e4cb90b8902f781f0fbf4908a47b8b52a44f5014301d5e1107a4bf17d32b8e1eaa47300271af0b4b9afda02a9cc629db845a3783dad36f61cc258218a98d9ed1e2288aa68119794829e127c9ae43248cce300f9e71c36338e0f942304dde4e0dc1f9753fea2ac2064292568d9ae5cb0e5dbc0e19d97d08d9e0c1e66f8ef3f32ac9e3ed15ac6162576b3e3530c19781ac318a907fcfaf19bb8116f843a9f692090da0aca87f257fe3751057eb1859eba09375256d58aced6e3f434990a2f708a843c97ccab51bfa4f4a137c9ca20e5890baf854887073686e4f03a8a5581cf63c6e7a2baf95a2c6de83787dc307bcd9e48ada7d3a28a419358c31d