nascng2.nasc.biz
- LafargeHolcim -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 0b:fc:50:9c:e1:f6:ba:5e:00:00:00:00:50:ed:25:9f was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
LafargeHolcim
Organization:
LafargeHolcim
State / Province:
Michigan
Locality: Dundee
Country: US
Locality: Dundee
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:fc:50:9c:e1:f6:ba:5e:00:00:00:00:50:ed:25:9fSerial Number (int): 15931601784278898578789739035125163423
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 51:8e:b5:0f:79:a4:aa:27:bb:76:ae:f9:61:5d:d2:17:a3:d1:b5:f8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): a9:de:1b:e2:7c:2c:cf:39:8f:9c:b0:4f:36:2e:d6:60:04:42:17:85
Fingerprint (sha256): 6a:46:59:b9:66:6b:85:1b:1b:16:64:9a:2a:d2:02:4d:27:30:d1:94:0a:34:3d:2f:d7:40:00:89:df:b7:7a:5d
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate nascng2.nasc.biz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nascng2.nasc.biz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nascng2.nasc.biz
www.nascng2.nasc.biz
www.nascng2.nasc.biz
Other certificates including the domain name nasc.biz
(limited to 100 certificates)
nascngs.nasc.biz
nascng2.nasc.biz
sps.nasc.biz
nascngs.nasc.biz
2work.nasc.biz
ibcm.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
spd.nasc.biz
sps.nasc.biz
spd.nasc.biz
2work.nasc.biz
vpn.nasc.biz
spd.nasc.biz
sps.nasc.biz
nascng2.nasc.biz
www.nascng2.nasc.biz
iwork.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
vpn.nasc.biz
traveler.nasc.biz
traveler.nasc.biz
vertex-prd.nasc.biz
nascngp.nasc.biz
2work.nasc.biz
nascngq.nasc.biz
spd.nasc.biz
vpnus.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngp.nasc.biz
spd.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
nascngd.nasc.biz
vpnus.nasc.biz
vpn.nasc.biz
2work.nasc.biz
nascng2.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngd.nasc.biz
vertex-prd.nasc.biz
labvpn.nasc.biz
nascng2.nasc.biz
sps.nasc.biz
nascngs.nasc.biz
2work.nasc.biz
ibcm.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
spd.nasc.biz
sps.nasc.biz
spd.nasc.biz
2work.nasc.biz
vpn.nasc.biz
spd.nasc.biz
sps.nasc.biz
nascng2.nasc.biz
www.nascng2.nasc.biz
iwork.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
vpn.nasc.biz
traveler.nasc.biz
traveler.nasc.biz
vertex-prd.nasc.biz
nascngp.nasc.biz
2work.nasc.biz
nascngq.nasc.biz
spd.nasc.biz
vpnus.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngp.nasc.biz
spd.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
nascngd.nasc.biz
vpnus.nasc.biz
vpn.nasc.biz
2work.nasc.biz
nascng2.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngd.nasc.biz
vertex-prd.nasc.biz
labvpn.nasc.biz
Certificate
The complete raw certificate details for nascng2.nasc.biz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIQC/xQnOH2ul4AAAAAUO0lnzANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTAyMDQxOTA2MDZaFw0yMTAyMDQxOTM2MDVaMGQxCzAJBgNVBAYTAlVTMREwDwYD VQQIEwhNaWNoaWdhbjEPMA0GA1UEBxMGRHVuZGVlMRYwFAYDVQQKEw1MYWZhcmdl SG9sY2ltMRkwFwYDVQQDExBuYXNjbmcyLm5hc2MuYml6MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAtnTVbhHs72wwgV3gL87dhLVCxCt1/kdD3sJcvT/O O7xBfPugiFy1VkQVUPgKXw4Uc3Lf1WmNVBrwub7tywE6ROnw8Uys8DAXKYiqkimV XRJ6sCLTmmv0+gSHuxKXAAnRmPk4nuRqRedywuyjQiVSSnG6j8XqQfBo1LCqBLAG oRpMMc9whJJBTrhy+DB4wjOEW7XfTeDQsMd2k5vKpw9ZXc7rHP3ndblL9Z3jlkpS XM3djbTx7CsGQ08jvY2qRkH83Fo1d1w/MCLV4JKfz4PQaItHY7OqTrDhxSMJxwS1 lKpJVFe1kvXtVGpi/S5kSvXKF6ZRNyHGw/DgIjAbdroAhwIDAQABo4IBsjCCAa4w EwYKKwYBBAHWeQIEAwEB/wQCBQAwMQYDVR0RBCowKIIQbmFzY25nMi5uYXNjLmJp eoIUd3d3Lm5hc2NuZzIubmFzYy5iaXowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8v Y3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6 bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAI BgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz cC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5l dC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DG Cky/MB0GA1UdDgQWBBRRjrUPeaSqJ7t2rvlhXdIXo9G1+DAJBgNVHRMEAjAAMA0G CSqGSIb3DQEBCwUAA4IBAQBfEnRxMaEIoQUWNQp+2/OxX4edyPwc43FbbE5ABfQU YED6tBOfl/3L42/OlYxzQvIvukXtG3re+feJEIHG3i5wONGWTuBWXKcGFg3ex4k6 uT2LfMMDXlncbnJYNrYn2toyFeN9ddc63OC36nlCWem8/3BwWtIsXDw57w06DY/6 cPRxxhPhusM0f5qXVT+hjptrHjyJ8fbU1s2fe8GCQrQVZ3WamkFdKkKf9RTslkXu bN/Xe34sOUej783NGrlhio8zx/q/tvD74g93NPdjJa7j/HRumzpJ0aI8gkw40jeK K30/2qYRhldG2sy4uuKxVIPzVZclGEeb/J+DnOZq76/k -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnTVbhHs72wwgV3gL87d hLVCxCt1/kdD3sJcvT/OO7xBfPugiFy1VkQVUPgKXw4Uc3Lf1WmNVBrwub7tywE6 ROnw8Uys8DAXKYiqkimVXRJ6sCLTmmv0+gSHuxKXAAnRmPk4nuRqRedywuyjQiVS SnG6j8XqQfBo1LCqBLAGoRpMMc9whJJBTrhy+DB4wjOEW7XfTeDQsMd2k5vKpw9Z Xc7rHP3ndblL9Z3jlkpSXM3djbTx7CsGQ08jvY2qRkH83Fo1d1w/MCLV4JKfz4PQ aItHY7OqTrDhxSMJxwS1lKpJVFe1kvXtVGpi/S5kSvXKF6ZRNyHGw/DgIjAbdroA hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15931601784278898578789739035125163423 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 19:06:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 19:36:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dundee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LafargeHolcim' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nascng2.nasc.biz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23032984353871199034989805474654024797460524517253378587126694429364425208761834622381768950058258325318241939069639146614206538617990264401944658885364325582543643349492844401208949892574600510619992157634699701145736892960789404559971465944188640279844809950613159749236545598511688486844092698273015544411832990674899538894197196636910143404773851693301856203254464633682891981243896738441373595614669167930793112334794322332313430045761275852817472184108591860961162048950258908591264532118128403030039159799227484662929567952866963118060643792434428092105924328279066477820690527355914725409116965558782938185863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nascng2.nasc.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nascng2.nasc.biz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 518eb50f79a4aa27bb76aef9615dd217a3d1b5f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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