brf.com
- BRF S.A -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number a9:90:ec:08:10:76:e4:08:00:00:00:00:50:fc:0a:c6 was issued on by Entrust, Inc..
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BRF S.A
Organization:
BRF S.A
State / Province:
Santa Catarina
Locality: Itajai
Country: BR
Locality: Itajai
Country: BR
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): a9:90:ec:08:10:76:e4:08:00:00:00:00:50:fc:0a:c6Serial Number (int): 225392009322867049858574631170796686022
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 3a:49:d0:ad:a8:f6:c2:90:4a:c8:1e:0d:ef:30:34:05:fa:12:c5:32
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): a3:d8:de:18:94:54:3c:df:10:2b:b0:06:5d:f6:ce:c8:56:dd:16:04
Fingerprint (sha256): 67:15:20:c2:2b:37:c7:59:58:ce:37:13:a2:fe:e4:0e:09:db:b8:3c:66:18:ca:27:5e:46:09:29:1e:14:81:78
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate brf.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for brf.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
brf.com
www.brf.com
brf-global.com
www.brf-global.com
imprensa.brf-global.com
www.brf.com
brf-global.com
www.brf-global.com
imprensa.brf-global.com
Other certificates including the domain name brf.com
(limited to 100 certificates)
sip.brf-corp.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
brf.com
brf.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
meerwel.sqiffer.com
confero-staging.televic.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
pied.app
akamaisecure7.qualtrics.com
www.elton.codes
essencia.brf.com
www.brf.com
nickromero.dev
akamaisecure7.qualtrics.com
www.brf-global.com
staging.boettinger.media
autodiscover.brf.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
njbbc.org
akamaisecure7.qualtrics.com
www.jyskerealkredit.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
brf.com
memegram.apptget.com
sip.brf-corp.com
sip.brf-corp.com
www.brf.com
www.elton.codes
akamaisecure7.qualtrics.com
resident.fetch.st
essencia.brf.com
talents.brf.com
imperva.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
*.brf.com
imperva.com
stg.ab6ix.re2fe.com
akamaisecure7.qualtrics.com
www.foreignconnect.org
*.brf.com
pokeprice.io
akamaisecure7.qualtrics.com
www.jyskerealkredit.com
pokeprice.io
admissaodigitalteste.brf.com
imperva.com
talents.brf.com
www.brf.com
confero-staging.televic.com
jamat.org
*.brf.com
homologacao.contratepitzi.online
www.ortura.com
www.clingirahmet.com
akamaisecure7.qualtrics.com
investorsurvey.pwc.com
admissaodigitalteste.brf.com
*.brf.com
www.brf-global.com
*.brf.com
akamaisecure7.qualtrics.com
assets.gamifier.co
conecta.brf.com
akamaisecure7.qualtrics.com
linear-sso.brf.com
akamaisecure7.qualtrics.com
sip.brf-corp.com
akamaisecure7.qualtrics.com
sip.brf-corp.com
*.brf.com
f1recap.barnazagoni.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
brf.com
brf.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
meerwel.sqiffer.com
confero-staging.televic.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
pied.app
akamaisecure7.qualtrics.com
www.elton.codes
essencia.brf.com
www.brf.com
nickromero.dev
akamaisecure7.qualtrics.com
www.brf-global.com
staging.boettinger.media
autodiscover.brf.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
njbbc.org
akamaisecure7.qualtrics.com
www.jyskerealkredit.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
brf.com
memegram.apptget.com
sip.brf-corp.com
sip.brf-corp.com
www.brf.com
www.elton.codes
akamaisecure7.qualtrics.com
resident.fetch.st
essencia.brf.com
talents.brf.com
imperva.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
*.brf.com
imperva.com
stg.ab6ix.re2fe.com
akamaisecure7.qualtrics.com
www.foreignconnect.org
*.brf.com
pokeprice.io
akamaisecure7.qualtrics.com
www.jyskerealkredit.com
pokeprice.io
admissaodigitalteste.brf.com
imperva.com
talents.brf.com
www.brf.com
confero-staging.televic.com
jamat.org
*.brf.com
homologacao.contratepitzi.online
www.ortura.com
www.clingirahmet.com
akamaisecure7.qualtrics.com
investorsurvey.pwc.com
admissaodigitalteste.brf.com
*.brf.com
www.brf-global.com
*.brf.com
akamaisecure7.qualtrics.com
assets.gamifier.co
conecta.brf.com
akamaisecure7.qualtrics.com
linear-sso.brf.com
akamaisecure7.qualtrics.com
sip.brf-corp.com
akamaisecure7.qualtrics.com
sip.brf-corp.com
*.brf.com
f1recap.barnazagoni.com
Certificate
The complete raw certificate details for brf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHaDCCBlCgAwIBAgIRAKmQ7AgQduQIAAAAAFD8CsYwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkxMjE4MTc1NzA2WhcNMjIwMzE2MTgyNzA2WjBbMQswCQYDVQQGEwJCUjEXMBUG A1UECBMOU2FudGEgQ2F0YXJpbmExDzANBgNVBAcTBkl0YWphaTEQMA4GA1UEChMH QlJGIFMuQTEQMA4GA1UEAxMHYnJmLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMbqViclaYTAiJu+qZldE3njQzfeitid03RcYDUIGWCP2SS9blYT l/Sm9oxtuzkE+oD6xADP17ZHyb53GqEOaSoMaL6OYUitg7JAM5xj0rwSDBH8NbYx RqPuP9lPJ/9MSuxpLCmBRLFiz7ra6fxHSFdK6GLgROFpjW51yL+QPPUoQ8xvwNh0 0nFe1IurbVOmbonW09URatthLvRijpz4XDX0a8DQonhpbWKdHixNiMSZUixqguae /2kdMWAVVD86DdqpMY3d3mFh31B5L0eyabt60zP83Ys3ua65Wt3sOiyE4uZ/LxcE S1ACpqUMolyH+xBIw6ZlsukSGvrqjNUgqekCAwEAAaOCA8UwggPBMFwGA1UdEQRV MFOCB2JyZi5jb22CC3d3dy5icmYuY29tgg5icmYtZ2xvYmFsLmNvbYISd3d3LmJy Zi1nbG9iYWwuY29tghdpbXByZW5zYS5icmYtZ2xvYmFsLmNvbTCCAfkGCisGAQQB 1nkCBAIEggHpBIIB5QHjAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g gw8AAAFvGkN84AAABAMASDBGAiEAsqAuZlCdepr+w2cAeNnedpMc8puGKdEgebBz ua/BR50CIQCch8TsdNfQK4n1w8xR+Z/01Ockfjua/1gzKbJcNqYOcQB3AFYUBpov 18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABbxpDfQAAAAQDAEgwRgIhALad TvkPze0LnKqrAVTxmERN7oIJ2JuXUzUSmHrWy5knAiEAjd3VzPgq7xNIznCquaky F6NsxVz99K1cJIHLWZi1S40AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6od BxPTDAAAAW8aQ30QAAAEAwBHMEUCIAEOgk8iplhzulkoeONEVT9VLx1VthX7yh++ yQdK8kliAiEAm7aeEqWKQO/LR2w0KZATeyMRiHNlBqQQuNTdWwddhI0AdwCkuQmQ tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW8aQ30BAAAEAwBIMEYCIQD+ B2tDgp3ol7IWWc429Vfh/DFF/SZR26U5E5HQIEryAQIhALBZgX7CtShioLqxUnqS k1RNyR4PwE+NhdvtKR242SptMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5l bnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUw KDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EM AQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50 cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFr LWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAd BgNVHQ4EFgQUOknQraj2wpBKyB4N7zA0BfoSxTIwCQYDVR0TBAIwADANBgkqhkiG 9w0BAQsFAAOCAQEAZ3A1w+jFgkdY2y/3DkUez3/UEMIu2VRA3xlxtC3fDD9is7JI VrmWSEWSjq6IngOP8i+vbouYUluqVEd3r51vs2dt6OwEHQbNGj9XKuRY3pTBuWQj yDU+tFb2mLGha33ICESF9lUgV/a0b2JDIcaRT2YuDoJ/u+kEluWeNnRAEJnUaYtk 8vJgY2kSYhg9fCp5hKRTxaF5/SFVMhMMwS7gH7Ne8GdrcaZ+QZrque2HBEuFrArx KRFrUaV/tNwkG1FHv17oxXubSUl6nVJICXJAaNoMuRdRtBY4eE+zPwjq7LZspNOs GAMTEgyURmu7OEnFElynywdIxUIG7dnOvp0r3A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxupWJyVphMCIm76pmV0T eeNDN96K2J3TdFxgNQgZYI/ZJL1uVhOX9Kb2jG27OQT6gPrEAM/XtkfJvncaoQ5p Kgxovo5hSK2DskAznGPSvBIMEfw1tjFGo+4/2U8n/0xK7GksKYFEsWLPutrp/EdI V0roYuBE4WmNbnXIv5A89ShDzG/A2HTScV7Ui6ttU6ZuidbT1RFq22Eu9GKOnPhc NfRrwNCieGltYp0eLE2IxJlSLGqC5p7/aR0xYBVUPzoN2qkxjd3eYWHfUHkvR7Jp u3rTM/zdize5rrla3ew6LITi5n8vFwRLUAKmpQyiXIf7EEjDpmWy6RIa+uqM1SCp 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 225392009322867049858574631170796686022 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 17:57:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-16 18:27:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Catarina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Itajai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRF S.A' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25110740035418822409230690799119212936052838268614481995668882414726678485498841871091876361963417843795974158040928764183654412839306963635217726061521414577810356375696764722358330235918343307490102374920538511700425432797268686390380166899606758539089029339647771004061961698306276320204894716813075599794551116931258266462294988680158088834456788898926398826555731673588863759785836237625462703922892837075159332999218431776073096611711035078001895845121326660967647834967818940711659539123554258663758458543476134469790663410882196700850167007290805210285440429645783181957425481134528415466555146144421360216553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brf-global.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brf-global.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imprensa.brf-global.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a49d0ada8f6c2904ac81e0def303405fa12c532 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00677035c3e8c5824758db2ff70e451ecf7fd410c22ed95440df1971b42ddf0c3f62b3b24856b9964845928eae889e038ff22faf6e8b98525baa544777af9d6fb3676de8ec041d06cd1a3f572ae458de94c1b96423c8353eb456f698b1a16b7dc8084485f6552057f6b46f624321c6914f662e0e827fbbe90496e59e3674401099d4698b64f2f26063691262183d7c2a7984a453c5a179fd215532130cc12ee01fb35ef0676b71a67e419aeab9ed87044b85ac0af129116b51a57fb4dc241b5147bf5ee8c57b9b49497a9d524809724068da0cb91751b41638784fb33f08eaecb66ca4d3ac180313120c94466bbb3849c5125ca7cb0748c54206edd9cebe9d2bdc