ehour.shanghaidisneyresort.com.cn

- Disney Enterprises, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number fa:d8:ef:54:05:a9:cf:58:00:00:00:00:50:f3:04:bd was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Disney Enterprises, Inc

Organization: Disney Enterprises, Inc
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fa:d8:ef:54:05:a9:cf:58:00:00:00:00:50:f3:04:bd
Serial Number (int): 333433389220486127606947063706454000829
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d2:a6:6b:b2:4c:64:d8:20:69:df:ef:9f:c1:6b:eb:5f:84:55:dc:8f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b8:d1:be:38:03:d1:4b:91:7c:fb:53:e4:e4:e4:4e:f4:35:a6:34:d9
Fingerprint (sha256): 5f:a3:cc:c5:19:0f:19:85:6f:11:48:c2:a0:8a:0e:54:a4:18:7f:4e:0b:4f:5f:bb:0f:90:20:a2:67:ec:b0:c4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ehour.shanghaidisneyresort.com.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ehour.shanghaidisneyresort.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ehour.shanghaidisneyresort.com.cn

Other certificates including the domain name shanghaidisneyresort.com.cn

(limited to 100 certificates)
VWMS.shanghaidisneyresort.com.cn
dmeeting.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
bbstudio.disney.com
ehskp-qa.shanghaidisneyresort.com.cn
printer-qa.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
shdrbuzz-lt.shanghaidisneyresort.com.cn
bsp.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
www.chinacache.com
www.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
dcs.shanghaidisneyresort.com.cn
d3security.shanghaidisneyresort.com.cn
d3security-qa-tmp.shanghaidisneyresort.com.cn
shdrltweb.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
wechatapi.shanghaidisneyresort.com.cn
media-cast.shanghaidisneyresort.com.cn
shdr-passportscan.shanghaidisneyresort.com.cn
shdrltweb.shanghaidisneyresort.com.cn
tenantsales.shanghaidisneyresort.com.cn
wmmobile81-qa.shanghaidisneyresort.com.cn
dmeeting.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
d3security-qa.shanghaidisneyresort.com.cn
www.chinacache.com
unveilthemagic.shanghaidisneyresort.com.cn
VWMS.shanghaidisneyresort.com.cn
customer-service-portal.shanghaidisneyresort.com.cn
shdrdevapi.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
shdrdevapi.shanghaidisneyresort.com.cn
SHDR-OWS-QA.starwave.com
shdrqaweb.shanghaidisneyresort.com.cn
wmmobile.shanghaidisneyresort.com.cn
TenantSales.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
latest.gw.fsts.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
shdr-sjlt-qa.shanghaidisneyresort.com.cn
media-cast.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
shdrbuzz-qa.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
bbstudio.disney.com
shdr-delphi.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
shdrdevweb.shanghaidisneyresort.com.cn
SHDR-OWS-QA.starwave.com
ehour.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
shdr-dam-qa.shanghaidisneyresort.com.cn
shdrbuzz-lt.shanghaidisneyresort.com.cn
www.chinacache.com
bsp.disney.com
sw88.shanghaidisneyresort.com.cn
www.chinacache.com
unveilthemagic.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
tenantsales-qa.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
bbstudio.disney.com
ehskp.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
shdr-dam-qa.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
ehskp-qa.shanghaidisneyresort.com.cn
tenantsales.shanghaidisneyresort.com.cn
www.chinacache.com
wmmobileq.shanghaidisneyresort.com.cn
ehour.shanghaidisneyresort.com.cn
shdr-delphi.shanghaidisneyresort.com.cn
view.shanghaidisneyresort.com.cn
SHDR-OWS-DEV.starwave.com
SHDR-OWS-DEV.starwave.com
SHDR-OWS.starwave.com
wmmobile.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
printer.shanghaidisneyresort.com.cn
bsp.disney.com
dhour.shanghaidisneyresort.com.cn
bsp.shanghaidisneyresort.com.cn
bsp.disney.com
printer.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
tsaservice.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
wmmobile.shanghaidisneyresort.com.cn
unveilthemagic.shanghaidisneyresort.com.cn
bluebeam.shanghaidisneyresort.com.cn

Certificate

The complete raw certificate details for ehour.shanghaidisneyresort.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIRAPrY71QFqc9YAAAAAFDzBL0wDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwNjEzMTIwMDQxWhcNMjAwNjEzMTIzMDQwWjCBgjELMAkGA1UEBhMCVVMxEzAR
BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1NlYXR0bGUxIDAeBgNVBAoTF0Rp
c25leSBFbnRlcnByaXNlcywgSW5jMSowKAYDVQQDEyFlaG91ci5zaGFuZ2hhaWRp
c25leXJlc29ydC5jb20uY24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1a7xIio+2fWfqMOjYiGDNKEaGD5a7YiBocC8FuMZ2F7ekpGa5QrW6pwKbqFOi
7AYN9RTBdIrBqS2Gjj0xw7XwvUmVPKz+DixIOc6S85Gw98WlF4WNRkx7H5SGpDFC
I11Al+JlCA5Mksou73lBWjvW6nTByHDH85+jtLedGwNCXmKkmcnJ2XSusW8h83f6
cZyG+qsWW17wvzElObbB5M24/0PmdDlNFUFYbx5D35lascCv+aJLBe6sGK5QJGTl
rOxRwCR1IALobu8fcIB2XHh7O4fPD2jCK+2cRCp+lY1wGT//rX5OlNYPzrNRHwvg
nfNLdx6CffEaL3pY4eI6GJNJAgMBAAGjggGtMIIBqTATBgorBgEEAdZ5AgQDAQH/
BAIFADAsBgNVHREEJTAjgiFlaG91ci5zaGFuZ2hhaWRpc25leXJlc29ydC5jb20u
Y24wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVs
MWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEE
XDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEF
BQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8G
A1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBTSpmuyTGTY
IGnf75/Ba+tfhFXcjzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQB0pCaY
38pdbNVjRZo0fEDQSYUx+NSZLgufKbYlD8VYPdbT+qh9HQImityUnjK24l3HRtdt
qWPbxohSdGov4RCjQjgSFS6NnwvOxdnR266CUbMH87BKr/Uk73aWBMx4P7Bf/Fq7
bVv4sqRPTzvebVWWMLI8sZU9IlAQsP8bmIbf5XUjG5VkVJPYgICRq0XQokN9YSZE
aaiLUECdwuhe+PwY3x6+eAobq6RGrrhj3DBMAi7ABvAwdmjtET0zFY8+JErH/HED
1LTIw797xCR7IJOtW6Vy46Ii3cGZmF7OJ43qy9YHT5WaIRVGyrQUrddi5FDsM7Nk
FrvljKWKMY9Cjl9k
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWu8SIqPtn1n6jDo2Ihg
zShGhg+Wu2IgaHAvBbjGdhe3pKRmuUK1uqcCm6hTouwGDfUUwXSKwaktho49McO1
8L1JlTys/g4sSDnOkvORsPfFpReFjUZMex+UhqQxQiNdQJfiZQgOTJLKLu95QVo7
1up0wchwx/Ofo7S3nRsDQl5ipJnJydl0rrFvIfN3+nGchvqrFlte8L8xJTm2weTN
uP9D5nQ5TRVBWG8eQ9+ZWrHAr/miSwXurBiuUCRk5azsUcAkdSAC6G7vH3CAdlx4
ezuHzw9owivtnEQqfpWNcBk//61+TpTWD86zUR8L4J3zS3cegn3xGi96WOHiOhiT
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333433389220486127606947063706454000829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 12:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 12:30:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Disney Enterprises, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ehour.shanghaidisneyresort.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22902259545023452458067914736647042469021920849663600573352177790984337572141866612617617842337503257662279020688113002136993698157298729434771031222353980442762506031828808252855881079239442694523913591961652908564270398188842077082651051050451151923269527285194825395227232936198275573827408289436350829950135562790217730776939200753695419094147306236138690849970620007765462851705137399000850383048718517690777556193453407698279249665093082589632640552998795885088762221015020879890570197318664335663932735685900191714481477292810810045426677658942498186834770622120185848309278330858265735378892070037311658169161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehour.shanghaidisneyresort.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2a66bb24c64d82069dfef9fc16beb5f8455dc8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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