phrstrapd.spo.state.de.us

- State of Delaware -

Issued by Entrust Certification Authority - L1B

About this certificate

This digital certificate with serial number 48:0d:4b:a8 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

State of Delaware

Organization: State of Delaware
Organization unit: DTI
State / Province: DELAWARE
Locality: Dover
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE
Organization unit: CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY
Organization unit: www.entrust.net/CPS is incorporated by reference
Organization unit: (c) 2008 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:0d:4b:a8
Serial Number (int): 1208830888
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: cd:71:25:aa:3e:e8:dc:94:4c:f2:ae:53:59:30:e7:5b:6c:d5:35:9e
AuthorityKeyId: f5:f2:96:88:7d:0d:f3:2a:f9:4e:e7:34:a0:bd:46:7e:13:d6:16:c8

Fingerprint (sha1): 58:55:26:b4:02:98:46:6d:61:6a:e7:8d:a6:d5:c6:45:1b:f7:94:66
Fingerprint (sha256): 61:36:ad:b0:c2:de:62:5c:5c:d3:1a:fb:10:31:78:70:3c:8b:c6:d9:57:ac:56:e5:d9:c3:51:1c:8c:80:4d:1e

Issuing Certificate URL: http://aia.entrust.net/2048-l1b.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1b.crl

Check the revocation status for certificate phrstrapd.spo.state.de.us

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phrstrapd.spo.state.de.us

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name state.de.us

(limited to 100 certificates)
iso.delaware.gov
www.dmap.state.de.us
dtisupport.delaware.gov
dtisupport.state.de.us
dtisupport.state.de.us
artifacts.dti.state.de.us
rp.dti.delaware.gov
rp.dti.delaware.gov
dmes-rlink.dhss.state.de.us
rp.dti.delaware.gov
SIP.state.de.us
ADFS.State.de.us
Autodiscover.state.de.us
erp.state.de.us
dmesmapir.dhss.state.de.us
rp.dti.delaware.gov
dcisuat.corp.delaware.gov
DOTAdminLobbySigns.dot.state.de.us
ADFS.state.de.us
prt3adotsigndb.state.de.us
LyncBiggsPool.state.de.us
appsserver.deljis.state.de.us
lists.state.de.us
dmes-rlink.dhss.state.de.us
ADFS.State.de.us
dmesesb.dhss.state.de.us
rp.dti.delaware.gov
rp.dti.delaware.gov
www.dmap.state.de.us
OWA.state.de.us
dhcp.state.de.us
owa.cj.state.de.us
onestoptspublic.dti.delaware.gov
LyncEdge.state.de.us
dtibiggsuccx.state.de.us
test.legis.delaware.gov
rp.dti.delaware.gov
rp.dti.delaware.gov
SIP.state.de.us
rp.dti.delaware.gov
sos-res.state.de.us
sos-res.state.de.us
*.legis.delaware.gov
rp.dti.delaware.gov
rp.dti.delaware.gov
dmes-alm.dhss.state.de.us
SecureMail.state.de.us
dmesedms.dhss.state.de.us
SecureMail.state.de.us
k12.de.us
mail.port.state.de.us
enterpriseenrollment.delaware.gov
uccx-biggs-dmv.state.de.us
testegov.dti.state.de.us
rp.dti.delaware.gov
uccx-dover-2.state.de.us
docdirerp.dti.state.de.us
LyncDovPool.state.de.us
SIP.state.de.us
apps.dnrec.state.de.us
dmeshcpadmin.dhss.state.de.us
rp.dti.delaware.gov
legis.delaware.gov
rp.dti.delaware.gov
*.legis.delaware.gov
extranet-test.gic.dos.state.de.us
ADFS.CJ.State.de.us
test.legis.delaware.gov
dmesbiar.dhss.state.de.us
TestDorOneStopClient.dti.state.de.us
extranet.phrst.state.de.us
lyris.dti.delaware.gov
onestoptspublic.dti.delaware.gov
rp.dti.delaware.gov
phrstrapd.spo.state.de.us
dmes-ppm.dhss.state.de.us
hearing-test.dmv.state.de.us
dtidovuccx.state.de.us
www.dmap.state.de.us
Mail.state.de.us
apps.dnrec.state.de.us
www.dmap.state.de.us
rp.dti.delaware.gov
securemail.state.de.us
conduits.dti.state.de.us
lyris.dti.delaware.gov
dhcp.state.de.us
dtisupport.delaware.gov
rp.dti.delaware.gov
vcs.delaware.gov
dsfstest.dti.state.de.us
legis.delaware.gov
vcs.state.de.us
dtisupport.delaware.gov
www.dmap.state.de.us
ws.state.de.us
rp.dti.delaware.gov
rp.dti.delaware.gov
uccx-dover-dmv.state.de.us
uccx-biggs-2.state.de.us

Certificate

The complete raw certificate details for phrstrapd.spo.state.de.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZVIupPP0Eh/JpP8Y6anfDV8ak
M1qgeiwAfkzqdrCIYsnJh2eBRFn7zZOeG8P12Zbqu6N2kNDlA5Pwns69C2NOeQdL
VLh+mYU1/T+lK2W5wLWlRM6d98jWHE1yEQ61rqGL+zVnlFiNTR5mwoCPnOapjVPI
F4MOJrzPZ7T7w5PQUQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208830888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/CPS is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2008 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1B'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-03-16 14:44:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-16 15:14:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DELAWARE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DTI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phrstrapd.spo.state.de.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 152614495826269409155414556715013855995072394156421126280851916223228836424194720502013489151628626995001903794418351885561252774598084143715683768626987604928483257952529486099384320654925179137768201169293453977594104033242421066812366037908871946810854615872983378884467653947761505299105890906939178864721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.16 (privateKeyUsagePeriod)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 32303039303331363134343432315a
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '20110316151420Z'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1b.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 69 110 116 114 117 115 116 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 97 118 97 105 108 97 98 108 101 32 97 116 32 119 119 119 46 101 110 116 114 117 115 116 46 110 101 116 47 99 112 115 32 32 105 115 32 104 101 114 101 98 121 32 105 110 99 111 114 112 111 114 97 116 101 100 32 105 110 116 111 32 121 111 117 114 32 117 115 101 32 111 114 32 114 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 67 101 114 116 105 102 105 99 97 116 101 46 32 32 84 104 105 115 32 67 80 83 32 99 111 110 116 97 105 110 115 32 108 105 109 105 116 97 116 105 111 110 115 32 111 110 32 119 97 114 114 97 110 116 105 101 115 32 97 110 100 32 108 105 97 98 105 108 105 116 105 101 115 46 32 67 111 112 121 114 105 103 104 116 32 40 99 41 32 50 48 48 56 32 69 110 116 114 117 115 116 32 76 105 109 105 116 101 100]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5f296887d0df32af94ee734a0bd467e13d616c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd7125aa3ee8dc944cf2ae535930e75b6cd5359e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.65.0 (entrustVersInfo)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:27|false] GeneralString 'V7.1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
								0328
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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