extranet.inalco.com
- Industrial Alliance Insurance and Financial Services Inc. -
Issued by Entrust Certification Authority - L1C
About this certificate
This digital certificate with serial number 4b:20:d2:fe was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Industrial Alliance Insurance and Financial Services Inc.
Organization:
Industrial Alliance Insurance and Financial Services Inc.
Organization unit: DOE
Organization unit: DOE
State / Province:
Quebec
Locality: Sillery
Country: CA
Locality: Sillery
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 4b:20:d2:feSerial Number (int): 1260442366
Serial Number lenght: 31 bits, 4 octets
SubjectKeyId: f2:c0:65:21:0b:50:5d:99:06:26:91:9a:e0:b1:b2:e3:f4:b6:46:83
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d
Fingerprint (sha1): 16:6f:65:fa:db:5a:5a:13:40:9e:10:d2:61:c5:1c:ed:67:e9:d0:da
Fingerprint (sha256): 58:77:1d:05:6c:c9:46:02:a0:67:0a:07:37:7e:24:7f:b8:ed:ba:a3:a2:fc:e2:52:80:79:97:a8:88:c1:f7:71
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1c.crl
Check the revocation status for certificate extranet.inalco.com
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for extranet.inalco.com
Public Key Algorithm
RSA
Key Size
1024
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name inalco.com
(limited to 100 certificates)
poupon.inalco.com
www.inalco.com
securefonc.inalco.com
webmail.inalco.com
rave01.inalco.com
poupon.inalco.com
ei.secureweb.inalco.com
intg.api.inalco.com
imageserver.secureweb.inalco.com
inalco.com
iamobile.inalco.com
fr.wiki-crm.kronos-web.com
www.inalco.com
gestionclients.intg.inalco.com
inalco.com
poupon.inalco.com
www.inalco.com
inalco.com
we.secureweb.inalco.com
inalco.com
www.iaretirement.inalco.com
imageserver.secureweb.accp.ia.iafg.net
we.intg.secureweb.inalco.com
imageserver.secureweb.inalco.com
bambin.inalco.com
poupon.inalco.com
*.intg.secureweb.ia.ca
api.ia.ca
ia-cem.accp.secureweb.inalco.com
www.inalco.com
fs41.inalco.com
*.inalco.com
webmail.ia.ca
fs41.inalco.com
poupon.inalco.com
accp.api.ia.ca
secure2.inalco.com
imageserver.secureweb.inalco.com
imageserver.secureweb.inalco.com
iagtools.inalco.com
*.secureweb.inalco.com
*.intg.secureweb.ia.ca
imageserver.secureweb.inalco.com
fs01.inalco.com
secure.inalco.com
poupon.inalco.com
*.external.inalco.com
secure2.inalco.com
fr.wiki-crm.kronos-web.com
login.service.dealers.inalco.com
AWSSOIA.inalco.com
webadmin.inalco.com
imageserver.secureweb.inalco.com
rave01.inalco.com
www.inalco.com
accp.api.inalco.com
www.inalco.com
ia-cem.secureweb.inalco.com
fs01.inalco.com
stmartin.inalco.com
inalco.com
poupon.inalco.com
webmail.ia.ca
statss.inalco.com
secure.inalco.com
inalco.com
fs01.inalco.com
fr.wiki-crm.kronos-web.com
we.secureweb.inalco.com
iagtools.inalco.com
extranet.inalco.com
www.inalco.com
inalco.com
inalco.com
www.inalco.com
fnct.api.inalco.com
novus.inalco.com
bambin.inalco.com
test.domaine2.secureweb.inalco.com
proxy.accp.secureweb.inalco.com
www.inalco.com
www.inalco.com
poupon.inalco.com
ia-cem.accp.secureweb.inalco.com
imageserver.secureweb.inalco.com
*.secureweb.inalco.com
bambin.inalco.com
inalco.com
fs41.inalco.com
proxy.secureweb.inalco.com
fr.wiki-crm.kronos-web.com
imageserver.secureweb.accp.ia.iafg.net
*.accp.webrequests.inalco.com
*.webrequests.inalco.com
IAGTOOLS.inalco.com
imageserver.secureweb.inalco.com
*.inalco.com
webmail.ia.ca
proxy.intg.secureweb.inalco.com
*.secureweb.inalco.com
www.inalco.com
securefonc.inalco.com
webmail.inalco.com
rave01.inalco.com
poupon.inalco.com
ei.secureweb.inalco.com
intg.api.inalco.com
imageserver.secureweb.inalco.com
inalco.com
iamobile.inalco.com
fr.wiki-crm.kronos-web.com
www.inalco.com
gestionclients.intg.inalco.com
inalco.com
poupon.inalco.com
www.inalco.com
inalco.com
we.secureweb.inalco.com
inalco.com
www.iaretirement.inalco.com
imageserver.secureweb.accp.ia.iafg.net
we.intg.secureweb.inalco.com
imageserver.secureweb.inalco.com
bambin.inalco.com
poupon.inalco.com
*.intg.secureweb.ia.ca
api.ia.ca
ia-cem.accp.secureweb.inalco.com
www.inalco.com
fs41.inalco.com
*.inalco.com
webmail.ia.ca
fs41.inalco.com
poupon.inalco.com
accp.api.ia.ca
secure2.inalco.com
imageserver.secureweb.inalco.com
imageserver.secureweb.inalco.com
iagtools.inalco.com
*.secureweb.inalco.com
*.intg.secureweb.ia.ca
imageserver.secureweb.inalco.com
fs01.inalco.com
secure.inalco.com
poupon.inalco.com
*.external.inalco.com
secure2.inalco.com
fr.wiki-crm.kronos-web.com
login.service.dealers.inalco.com
AWSSOIA.inalco.com
webadmin.inalco.com
imageserver.secureweb.inalco.com
rave01.inalco.com
www.inalco.com
accp.api.inalco.com
www.inalco.com
ia-cem.secureweb.inalco.com
fs01.inalco.com
stmartin.inalco.com
inalco.com
poupon.inalco.com
webmail.ia.ca
statss.inalco.com
secure.inalco.com
inalco.com
fs01.inalco.com
fr.wiki-crm.kronos-web.com
we.secureweb.inalco.com
iagtools.inalco.com
extranet.inalco.com
www.inalco.com
inalco.com
inalco.com
www.inalco.com
fnct.api.inalco.com
novus.inalco.com
bambin.inalco.com
test.domaine2.secureweb.inalco.com
proxy.accp.secureweb.inalco.com
www.inalco.com
www.inalco.com
poupon.inalco.com
ia-cem.accp.secureweb.inalco.com
imageserver.secureweb.inalco.com
*.secureweb.inalco.com
bambin.inalco.com
inalco.com
fs41.inalco.com
proxy.secureweb.inalco.com
fr.wiki-crm.kronos-web.com
imageserver.secureweb.accp.ia.iafg.net
*.accp.webrequests.inalco.com
*.webrequests.inalco.com
IAGTOOLS.inalco.com
imageserver.secureweb.inalco.com
*.inalco.com
webmail.ia.ca
proxy.intg.secureweb.inalco.com
*.secureweb.inalco.com
Certificate
The complete raw certificate details for extranet.inalco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEbDCCA1SgAwIBAgIESyDS/jANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0 Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMDA0MDUxMjU4MzJaFw0xMTA0MDUx MzI4MjlaMIGgMQswCQYDVQQGEwJDQTEPMA0GA1UECBMGUXVlYmVjMRAwDgYDVQQH EwdTaWxsZXJ5MUIwQAYDVQQKEzlJbmR1c3RyaWFsIEFsbGlhbmNlIEluc3VyYW5j ZSBhbmQgRmluYW5jaWFsIFNlcnZpY2VzIEluYy4xDDAKBgNVBAsTA0RPRTEcMBoG A1UEAxMTZXh0cmFuZXQuaW5hbGNvLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw gYkCgYEApZTQWp4m6gHRZo93DHwIwAvQZIaqcJ4QIyHvhUVEeuZiivgn+yZhX0Cd jmYniNVuDP8nx9SgtKnOLigNgBXOy0uBOI+OP8erQ1/iBjKSK6N5v7V1uDAZhqQB /DcE17ukbNzJLc/Q7exQmDeMDqlb1TQuqZdWokbcAenORfXcIpECAwEAAaOCAR0w ggEZMAsGA1UdDwQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAzBgNVHR8ELDAq MCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWMuY3JsMDMGCCsG AQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQw QAYDVR0gBDkwNzA1BgkqhkiG9n0HSwIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3 dy5lbnRydXN0Lm5ldC9ycGEwHwYDVR0jBBgwFoAUHvGriQb4SQ8BM3fuFHruGXyT KE0wHQYDVR0OBBYEFPLAZSELUF2ZBiaRmuCxsuP0tkaDMAkGA1UdEwQCMAAwDQYJ KoZIhvcNAQEFBQADggEBAGiKhrxTpjOseiKfNCtedm1Hznxqq4nBoslWIi712jb1 6QURYpOdJQzitev0Bkdm8cLwPw1sy360z8CHhlknKeVSQfLFa6qyugiuso5X0FT0 PvIJHeLxtG+QMAmKgwIasY5y/qkdYLsMuWyblGkdKUJyqzm9qQ804lb5tLp9Xisp o6kePjLrIRadhFAa4Wy3xu4rJZvSSODulBPshMyOh61vmraoPyEF/wwugsffyiLL ifMc3ZQmOdiM0as1us9yI1CQXrV2MI+m7nTiHfYaVyDyHiEZXBqkhqmNaVNOrI7t NzTxqrSiBoIkg5MNNOeTlTSZcXpwM82tPabYtVK5F2M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCllNBanibqAdFmj3cMfAjAC9Bk hqpwnhAjIe+FRUR65mKK+Cf7JmFfQJ2OZieI1W4M/yfH1KC0qc4uKA2AFc7LS4E4 j44/x6tDX+IGMpIro3m/tXW4MBmGpAH8NwTXu6Rs3Mktz9Dt7FCYN4wOqVvVNC6p l1aiRtwB6c5F9dwikQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1260442366 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-04-05 12:58:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-05 13:28:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sillery' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extranet.inalco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 116275146044796565376165428145869549863000608978231168391219453311226480716649801247556846336406625595486163934324144441612964637999415443747741038350720996335465608699896010101257617286476768590182936544801705383409738736834859553895247526890655237102509334440404924432519409310244838830460144011764146381457 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f2c065210b505d990626919ae0b1b2e3f4b64683 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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