amatabpd000.am.lafargeone.net

- Lafarge -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d0:81:59:9f:82:cc:d4:7c:00:00:00:00:50:f3:fd:24 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lafarge

Organization: Lafarge
State / Province: Virginia
Locality: Herndon
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d0:81:59:9f:82:cc:d4:7c:00:00:00:00:50:f3:fd:24
Serial Number (int): 277151047190226734667836588035623091492
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 55:6f:ec:30:a0:d3:5c:8d:e0:53:d7:38:9c:fa:ef:fe:3e:01:c6:71
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f2:22:d6:fd:cc:6d:fc:a6:1e:5c:95:6c:ab:81:82:13:ff:2d:36:d2
Fingerprint (sha256): 69:28:32:97:c3:73:a6:3e:4c:95:8a:78:ad:0e:8b:93:ff:6f:ed:85:ca:6e:ab:52:c6:fa:2f:5f:37:45:49:a3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate amatabpd000.am.lafargeone.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amatabpd000.am.lafargeone.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amatabpd000.am.lafargeone.net

Other certificates including the domain name lafargeone.net

(limited to 100 certificates)
corpidc-app20.corp.lafargeone.net
amaulb01.am.dev.lafargeone.net
corpidc-app20.corp.lafargeone.net
citrix.am.lafargeone.net
citrix.am.lafargeone.net
corpidc-app22.lafarge.com
amatabpd000.am.lafargeone.net
citrixqa.am.qua.lafargeone.net
amaulb01.am.dev.lafargeone.net
corpidc-app20.corp.lafargeone.net
citrix.am.lafargeone.net
amapscvip500.am.lafargeone.net
amapscvip000.am.lafargeone.net
corpidc-app22.lafarge.com
citrixqa.am.qua.lafargeone.net

Certificate

The complete raw certificate details for amatabpd000.am.lafargeone.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIRANCBWZ+CzNR8AAAAAFDz/SQwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwNzA1MTgzMDU4WhcNMjExMDA0MTkwMDU2WjBsMQswCQYDVQQGEwJVUzERMA8G
A1UECBMIVmlyZ2luaWExEDAOBgNVBAcTB0hlcm5kb24xEDAOBgNVBAoTB0xhZmFy
Z2UxJjAkBgNVBAMTHWFtYXRhYnBkMDAwLmFtLmxhZmFyZ2VvbmUubmV0MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyCynPwEvYr5R3MYZTc6k1BHtngnN
+AkyE70IJCzE8UdG3EOcMmBU67eUGHmAvio/vbfCfHEPbjjiHGS0Y+J5RJ2AXaYg
PhTJ/XmFRicw/YveetCqft1h8NhuJCQ/wNPqXYt+MFWyLYbJOyGde1Q9e+hwzb9+
ngWMPfkt/c2fSkDjKqIBmlW6p8b1kyeyyHMYxpl3z3hWLaGanekeo5kuegk71/R3
9e3iVvMXofJb57uVZq7ZQ4k/fbJrTOB+vnIpLWL+WdvPz9KcKcmealRGNkEPcDtm
yPtNoV1Rz/PIPTB/mm5488I4KGoap47fimJYf7+sExEUDdDed4vnPuYX1WZveZD4
T5qtxcTz5HW2359N7f/M8s201aOo2TADxSnVL3Z5xvnfvdpouYN2oc2Tut3mKrq8
ceoi9o4ujp9E75wcFORqIdLbQbf20bAt0uEM17yFVt582lV+qP8Eh6UQecRuFxlO
BnpD4W4Toxw/xqEOnlctMDrAic7sFYnt6xwmDykFSiZd1pnRDuLvD22f8BT/46/F
e3Klc5/s6XQLqB++vW04c60h+JkouztjNYWmP2CtPgH1YpTn1IzNt1l2lfxOGGnc
DuEfK/srkjf3Co4QiVA6OOLiQE/5ISodeLLvGDSZ1AH3Vs17pLjVN6HbXJI76Yn/
eAQw3oPLabobGQUCAwEAAaOCAakwggGlMBMGCisGAQQB1nkCBAMBAf8EAgUAMCgG
A1UdEQQhMB+CHWFtYXRhYnBkMDAwLmFtLmxhZmFyZ2VvbmUubmV0MA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCww
KjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNV
HSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5l
bnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEF
BQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6
Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSC
onB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUVW/sMKDTXI3gU9c4nPrv/j4B
xnEwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAkgH2hQZn/AVHGTD/QFTl
yJOIIAA6uFZu7k8tpP/GdXveouauYoOJT+9y40J1OcS8kUWuxAq1sZab1nTepDAQ
dQopOFUrZiCOvGQ75V5tELmkcqwjZyT7UHAjFF+SRVAsOwNQsEvZfeQ4PfxYalkK
sLFGje6XC83ZjvaB79s2CJ695AJi2l2N8mnlOdKxKB+CFeSjAgV6IysfgDdR3+nO
PIRSt2peVc5TzaXWaXq3OcufbbOF1C1W5k/3UgGiwjSFonyEGfkrhTbXEgYU5wff
cAmF8STXCQHC8CtANKEnow98nHAhcpUDhpeHKJTD6nZUyzftT1zusdr2uxDOYwtS
Cg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyCynPwEvYr5R3MYZTc6k
1BHtngnN+AkyE70IJCzE8UdG3EOcMmBU67eUGHmAvio/vbfCfHEPbjjiHGS0Y+J5
RJ2AXaYgPhTJ/XmFRicw/YveetCqft1h8NhuJCQ/wNPqXYt+MFWyLYbJOyGde1Q9
e+hwzb9+ngWMPfkt/c2fSkDjKqIBmlW6p8b1kyeyyHMYxpl3z3hWLaGanekeo5ku
egk71/R39e3iVvMXofJb57uVZq7ZQ4k/fbJrTOB+vnIpLWL+WdvPz9KcKcmealRG
NkEPcDtmyPtNoV1Rz/PIPTB/mm5488I4KGoap47fimJYf7+sExEUDdDed4vnPuYX
1WZveZD4T5qtxcTz5HW2359N7f/M8s201aOo2TADxSnVL3Z5xvnfvdpouYN2oc2T
ut3mKrq8ceoi9o4ujp9E75wcFORqIdLbQbf20bAt0uEM17yFVt582lV+qP8Eh6UQ
ecRuFxlOBnpD4W4Toxw/xqEOnlctMDrAic7sFYnt6xwmDykFSiZd1pnRDuLvD22f
8BT/46/Fe3Klc5/s6XQLqB++vW04c60h+JkouztjNYWmP2CtPgH1YpTn1IzNt1l2
lfxOGGncDuEfK/srkjf3Co4QiVA6OOLiQE/5ISodeLLvGDSZ1AH3Vs17pLjVN6Hb
XJI76Yn/eAQw3oPLabobGQUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277151047190226734667836588035623091492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 18:30:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-04 19:00:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herndon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lafarge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amatabpd000.am.lafargeone.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816640413570306805257354737183625264233767516893137975925868598557229620084159658886343118458311004535692207575822356005877300613948568770658069485007623179547530055034438930708294152624444889707275597327750849818771625557060433581908212654286339221613266033677383320017069405957592632414220609417889710219396402603784750607844978758555189821809300470414964962129954500784781093548734412989872690145308697813735788906223656504856891236409532557263255461952722129109606422395293982955672732730261448867230799693260814592373901065454491300797725710248911918829904307802539956747032814160886073061737603764058306938625259998204323691738407459570737507664903682406524233839518525196452226252143374154902772126246061696710977562320822793472736021284117512935751303073649470863934548930718493637674186764532708055237621274004042413200973579735938599837494424266559056171081195831334937743852220227465046479464053336492869830181353950661228890299831498316225659406587943134549540519296118617081002778958416296435168389078989503517152755992458387695034140614751731301705104754439959079479920194807912036459714057783235269176431964184291646353110739260966924924897707503431668993920681310481944218349112633037202897132216979262156163677624581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amatabpd000.am.lafargeone.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							556fec30a0d35c8de053d7389cfaeffe3e01c671
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009201f6850667fc05471930ff4054e5c8938820003ab8566eee4f2da4ffc6757bdea2e6ae6283894fef72e3427539c4bc9145aec40ab5b1969bd674dea43010750a2938552b66208ebc643be55e6d10b9a472ac236724fb507023145f9245502c3b0350b04bd97de4383dfc586a590ab0b1468dee970bcdd98ef681efdb36089ebde40262da5d8df269e539d2b1281f8215e4a302057a232b1f803751dfe9ce3c8452b76a5e55ce53cda5d6697ab739cb9f6db385d42d56e64ff75201a2c23485a27c8419f92b8536d7120614e707df700985f124d70901c2f02b4034a127a30f7c9c70217295038697872894c3ea7654cb37ed4f5ceeb1daf6bb10ce630b520a