webmail.op-palvelut.fi

- OP Osuuskunta -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a2:7a:d1:91:a8:9d:1e:8c:00:00:00:00:50:e8:be:b0 was issued on by Entrust, Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OP Osuuskunta

Organization: OP Osuuskunta
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a2:7a:d1:91:a8:9d:1e:8c:00:00:00:00:50:e8:be:b0
Serial Number (int): 215972646097771775405749145093215403696
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 05:72:1b:93:04:0b:3f:f2:6b:66:7e:4f:c9:21:c9:75:e8:6a:72:03
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6e:29:f8:f2:14:30:85:04:78:e4:28:2c:e2:b6:0a:48:76:9d:bf:30
Fingerprint (sha256): 51:5e:59:47:c6:d4:17:ff:1a:60:8a:1f:8d:c1:ce:ef:56:37:6e:6c:c9:94:3f:13:7a:aa:4b:06:b9:20:8c:80

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate webmail.op-palvelut.fi

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.op-palvelut.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.op-palvelut.fi
opexcas.op.okobank.com
mobiili.op.fi
autodiscover.op.fi
hybrid.op-palvelut.fi
smtpgw.op.fi
autodiscover.pohjola.fi
autodiscover.pohjola.lv
autodiscover.pohjola.ee
autodiscover.a-vakuutus.fi
autodiscover.suomi-yhtio.fi
autodiscover.opbank.ee
autodiscover.opbank.lv
autodiscover.opbank.lt

Other certificates including the domain name op-palvelut.fi

(limited to 100 certificates)
opbstpsdlv.op-palvelut.fi
palhavr.aws.op-palvelut.fi
remote.op-palvelut.fi
opla.tuot.op-palvelut.fi
scl.internal.aws.op-palvelut.fi
*.bravo.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
palhavr.internal.aws.op-palvelut.fi
*.vhahpral.internal.aws.op-palvelut.fi
verkkomaksu.op.fi
*.devops-coe.aws.op-palvelut.fi
opftp906.op-palvelut.fi
voroa1.op-palvelut.fi
*.aws.tuot.op-palvelut.fi
extlyncfarm.lync.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
splunk.tuot.op-palvelut.fi
ldap-isam.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
*.markets-analytics.internal.aws.op-palvelut.fi
opvaasrtcmsr2.op-palvelut.fi
portlet.viu.internal.aws.op-palvelut.fi
intraidp.op-palvelut.fi
*.vhahmyty.internal.aws.op-palvelut.fi
*.prod-qa.ccc.internal.aws.op-palvelut.fi
*.devops-coe.aws.op-palvelut.fi
*.markets-quants.aws.op-palvelut.fi
*.markets-quants.aws.op-palvelut.fi
m-request.op-palvelut.fi
vhplvsmjci.hec.tuot.op-palvelut.fi
verkkomaksu.op.fi
aviatrixctrl.internal.aws.op-palvelut.fi
resys.nl-pint.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
nolio-test.op-palvelut.fi
*.nl-aa-claims.internal.aws.op-palvelut.fi
*.cdc.internal.aws.op-palvelut.fi
*.acs-preprod.internal.aws.op-palvelut.fi
opmh.op-palvelut.fi
m-request.op-palvelut.fi
ext-ydin.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
*.global.kubelb.op-palvelut.fi
opla.tuot.op-palvelut.fi
nolio.op-palvelut.fi
*.ccc.internal.aws.op-palvelut.fi
view21rds.tuot.op-palvelut.fi
psd2-sandbox.aws.op-palvelut.fi
tcsopcloud.tuot.op-palvelut.fi
voroa1.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
nolio-test.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
opsccmcmg.op-palvelut.fi
op8021xnac2.op-palvelut.fi
vhplvws5wd01.hec.tuot.op-palvelut.fi
subscriptionmanagement.op-palvelut.fi
*.sya.internal.aws.op-palvelut.fi
*.markets-quants.internal.aws.op-palvelut.fi
vhplvow2wd01.hec.tuot.op-palvelut.fi
arekps.op-palvelut.fi
geotrust-admin.dk-common.aws.op-palvelut.fi
*.prod.creditengine.internal.aws.op-palvelut.fi
hallinta.op-kulku.fi
*.finanssialy-services.internal.aws.op-palvelut.fi
baw-common.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
www.kontaktiarchive.internal.aws.op-palvelut.fi
ldap-isam.op-palvelut.fi
mapi.internal.aws.op-palvelut.fi
opvirtdesk.op-palvelut.fi
cmg.prod.op-palvelut.fi
*.nl-aa-claims-pre.internal.aws.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
opmb.aws.op-palvelut.fi
*.nl-web-cc-person.internal.aws.op-palvelut.fi
*.prod.nl-web-event-stream.internal.aws.op-palvelut.fi
*.vhahpral.internal.aws.op-palvelut.fi
api-nc.op-kassa.fi
7OGBLPIAMAP.op-palvelut.fi
api.kortteli.aws.op-palvelut.fi
pa-commpool.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
*.sanelmapreprod.internal.aws.op-palvelut.fi
*.sya.internal.aws.op-palvelut.fi
sapfin.hec.tuot.op-palvelut.fi
*.aviatrixctrl.internal.aws.op-palvelut.fi
*.digiaspa.tuot.op-palvelut.fi
*.viu.aws.op-palvelut.fi
*.nl-aa-claims.internal.aws.op-palvelut.fi
ucc.lync.op-palvelut.fi
opsctinsthgsr1.op-palvelut.fi
mobilepilot.op-palvelut.fi
vhplvws2wd01.hec.tuot.op-palvelut.fi
korttelisovellus.op-palvelut.fi
op-kausiauto.fi
7ocilpefpap01.op-palvelut.fi

Certificate

The complete raw certificate details for webmail.op-palvelut.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2VrZ2mvswnc8gGaT4Ss
HZ92818R31ICTj0C3wUNcavusjV0bceAJvevhrFndJbXtGL925uy9sUdUJ2TRmPJ
4h30i1gtszsd+7DqgBu4JUj1FLRff/j/Mso49ifVu7WcF/LSOqhFf29klwWlps0x
ZBKf45VuVy5f4GlLx5wtABVZCl1tjyJyQzYBxcEN1ywoXeFxy61XuD6Yp3QVs70p
d5jLGhr1J9NxaiVTDhrK0F+ycaK0Qvq1ZXtAFnYEdIzg72rDzbovXG8joTRjP22M
w4KOangeRr0Dg4DAKR5sFyyAfXeSN40ByG36eG14aNvb9EhpVtAV8Tbx7wq0Dr63
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 215972646097771775405749145093215403696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 07:12:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 07:42:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OP Osuuskunta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.op-palvelut.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20121902332050287633790465649801609548590675915266601842991461224381298743793462838537740654468509928545206229792647523991017614775877964074292430322751326483567749420285240395690834055975760670281626667605951444361001311911073270342682943935649492611786659677697810082526829900265397648132258754340168955383827416323223365761247865057754849960505235240518297431029074767420339563274649852926361962434982862742529567753864351232631262348053676838815298636736662093673031900096104184187905971247129450554819410955927141934189444291827073630844307522358032368038412742337247025516150092160362523366135860933111616288719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (328 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.op-palvelut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opexcas.op.okobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiili.op.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.op.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.op-palvelut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtpgw.op.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pohjola.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pohjola.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pohjola.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.a-vakuutus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.suomi-yhtio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.opbank.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.opbank.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.opbank.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05721b93040b3ff26b667e4fc921c975e86a7203
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d2b9e57f55b39b5cd568632682a63bb3bd028ac76b77246903da95a1d919ffd3c858b9dcbb5ff2c65082c41ec7a658e009e21497d33e166b11ffdb36975c31b441e42280cd7c9b963c609067a2bf23451b733c5ad290e0b3664df40e2e78cbdb272687ca42fb89924e8b0d104a27e2c59761703693565c01cb8b7c5a72a3a74f5bfb301f29bd500f086645d1f29815958f4a3c1efe91a883721df493f829424e622f652413c0c2d3e5328a3821048f266f6dec417d32047f06c13f5bee4e28124f69443594948720de0295396e2ef5ff00861bd1daa10e4ea4c9e8476ea7ef50b366f033394566902bf6cd591139dd11b9bb2e50fb238557eee21521716ba2b