www.dmap.state.de.us

- State of Delaware -

Issued by Entrust Certification Authority - L1B

About this certificate

This digital certificate with serial number 48:0d:60:fb was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

State of Delaware

Organization: State of Delaware
Organization unit: Delaware Healthcare Services
State / Province: DELAWARE
Locality: Dover
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE
Organization unit: CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY
Organization unit: www.entrust.net/CPS is incorporated by reference
Organization unit: (c) 2008 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:0d:60:fb
Serial Number (int): 1208836347
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 5b:b0:66:b2:9f:40:1c:7e:89:b5:4a:b1:12:5d:61:06:ab:6f:5a:f0
AuthorityKeyId: f5:f2:96:88:7d:0d:f3:2a:f9:4e:e7:34:a0:bd:46:7e:13:d6:16:c8

Fingerprint (sha1): 1e:c6:da:ce:eb:a1:34:3b:14:7d:9d:23:d0:39:e8:70:bb:74:25:c5
Fingerprint (sha256): 65:ae:ef:1d:58:dc:7a:db:1c:db:e5:e9:bc:42:01:a4:ea:2e:92:70:52:9d:15:31:7b:9e:31:9e:c4:7f:fc:1b

Issuing Certificate URL: http://aia.entrust.net/2048-l1b.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1b.crl

Check the revocation status for certificate www.dmap.state.de.us

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dmap.state.de.us

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name state.de.us

(limited to 100 certificates)
iso.delaware.gov
www.dmap.state.de.us
dtisupport.delaware.gov
dtisupport.state.de.us
dtisupport.state.de.us
artifacts.dti.state.de.us
rp.dti.delaware.gov
rp.dti.delaware.gov
dmes-rlink.dhss.state.de.us
rp.dti.delaware.gov
SIP.state.de.us
ADFS.State.de.us
Autodiscover.state.de.us
erp.state.de.us
dmesmapir.dhss.state.de.us
rp.dti.delaware.gov
dcisuat.corp.delaware.gov
DOTAdminLobbySigns.dot.state.de.us
ADFS.state.de.us
prt3adotsigndb.state.de.us
LyncBiggsPool.state.de.us
appsserver.deljis.state.de.us
lists.state.de.us
dmes-rlink.dhss.state.de.us
ADFS.State.de.us
dmesesb.dhss.state.de.us
rp.dti.delaware.gov
rp.dti.delaware.gov
www.dmap.state.de.us
OWA.state.de.us
dhcp.state.de.us
owa.cj.state.de.us
onestoptspublic.dti.delaware.gov
LyncEdge.state.de.us
dtibiggsuccx.state.de.us
test.legis.delaware.gov
rp.dti.delaware.gov
rp.dti.delaware.gov
SIP.state.de.us
rp.dti.delaware.gov
sos-res.state.de.us
sos-res.state.de.us
*.legis.delaware.gov
rp.dti.delaware.gov
rp.dti.delaware.gov
dmes-alm.dhss.state.de.us
SecureMail.state.de.us
dmesedms.dhss.state.de.us
SecureMail.state.de.us
k12.de.us
mail.port.state.de.us
enterpriseenrollment.delaware.gov
uccx-biggs-dmv.state.de.us
testegov.dti.state.de.us
rp.dti.delaware.gov
uccx-dover-2.state.de.us
docdirerp.dti.state.de.us
LyncDovPool.state.de.us
SIP.state.de.us
apps.dnrec.state.de.us
dmeshcpadmin.dhss.state.de.us
rp.dti.delaware.gov
legis.delaware.gov
rp.dti.delaware.gov
*.legis.delaware.gov
extranet-test.gic.dos.state.de.us
ADFS.CJ.State.de.us
test.legis.delaware.gov
dmesbiar.dhss.state.de.us
TestDorOneStopClient.dti.state.de.us
extranet.phrst.state.de.us
lyris.dti.delaware.gov
onestoptspublic.dti.delaware.gov
rp.dti.delaware.gov
phrstrapd.spo.state.de.us
dmes-ppm.dhss.state.de.us
hearing-test.dmv.state.de.us
dtidovuccx.state.de.us
www.dmap.state.de.us
Mail.state.de.us
apps.dnrec.state.de.us
www.dmap.state.de.us
rp.dti.delaware.gov
securemail.state.de.us
conduits.dti.state.de.us
lyris.dti.delaware.gov
dhcp.state.de.us
dtisupport.delaware.gov
rp.dti.delaware.gov
vcs.delaware.gov
dsfstest.dti.state.de.us
legis.delaware.gov
vcs.state.de.us
dtisupport.delaware.gov
www.dmap.state.de.us
ws.state.de.us
rp.dti.delaware.gov
rp.dti.delaware.gov
uccx-dover-dmv.state.de.us
uccx-biggs-2.state.de.us

Certificate

The complete raw certificate details for www.dmap.state.de.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJRnLdX1SnqgSjjfiXKqxlkFhQ
nDDXmpkJndGJ1ky1bmdCI/oTSG4Mf2JeqcKRZRwQLFu/7e97k9zYnKuZf57PVN2U
e+1ecyFeSlXQJHaUtUBoflD9gr3wNmy+8KbcWYMm1Otogl9nHv/dVHZ0kImcBISG
uPZDyKJXs7DNZ1IC6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208836347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/CPS is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2008 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1B'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-04-08 12:21:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-04-08 12:51:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DELAWARE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware Healthcare Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dmap.state.de.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 96397916798305488274422179113967637141787609567775238870244996312857267245399805940336336570905241694436245989981362067365098943068240496151639730204254594256503302367956560703475669362225781500227225064003295315255720266186027295206891589145837479913570953031511701220397117105653337774677945857977336595177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.16 (privateKeyUsagePeriod)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 32303039303430383132323133355a
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '20100408125134Z'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1b.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 69 110 116 114 117 115 116 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 97 118 97 105 108 97 98 108 101 32 97 116 32 119 119 119 46 101 110 116 114 117 115 116 46 110 101 116 47 99 112 115 32 32 105 115 32 104 101 114 101 98 121 32 105 110 99 111 114 112 111 114 97 116 101 100 32 105 110 116 111 32 121 111 117 114 32 117 115 101 32 111 114 32 114 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 67 101 114 116 105 102 105 99 97 116 101 46 32 32 84 104 105 115 32 67 80 83 32 99 111 110 116 97 105 110 115 32 108 105 109 105 116 97 116 105 111 110 115 32 111 110 32 119 97 114 114 97 110 116 105 101 115 32 97 110 100 32 108 105 97 98 105 108 105 116 105 101 115 46 32 67 111 112 121 114 105 103 104 116 32 40 99 41 32 50 48 48 56 32 69 110 116 114 117 115 116 32 76 105 109 105 116 101 100]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5f296887d0df32af94ee734a0bd467e13d616c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bb066b29f401c7e89b54ab1125d6106ab6f5af0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.65.0 (entrustVersInfo)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:27|false] GeneralString 'V7.1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
								0328
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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