*.nicd.ac.za

- National Health Laboratory Service -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9c:a3:3a:71:48:54:36:c3:00:00:00:00:50:f5:12:e7 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Health Laboratory Service

Organization: National Health Laboratory Service
Locality: Johannesburg
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9c:a3:3a:71:48:54:36:c3:00:00:00:00:50:f5:12:e7
Serial Number (int): 208207097085312158066088752450859504359
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ea:36:71:4e:7a:e3:50:3b:f7:10:ce:b0:db:d6:b1:00:bd:99:91:ea
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ac:83:ed:53:13:e4:8f:5c:dd:63:29:a7:27:a0:29:8c:9c:4e:f6:50
Fingerprint (sha256): 6d:19:7a:d6:51:e3:0b:56:60:30:80:59:74:b9:dd:90:48:92:a5:5b:c6:24:99:8b:a4:a1:b3:6c:fd:ea:a4:df

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.nicd.ac.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nicd.ac.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nicd.ac.za
nicd.ac.za

Other certificates including the domain name nicd.ac.za

(limited to 100 certificates)
doctors.mycure.md
ptschemes.nicd.ac.za
webmail.nicd.ac.za
securelogin.nicd.ac.za
webmail.nicd.ac.za
www.weaknesswork.com
nicdbramowas.nicd.ac.za
survey.nicd.ac.za
gis.nicd.ac.za
*.nicd.ac.za
wastewater.nicd.ac.za
www.gamasoft.co.uk
*.nicd.ac.za
securelogin.nicd.ac.za
sandexweb.nicd.ac.za
webmail.nicd.ac.za
nicdeocvcse01.nicd.ac.za
*.nicd.ac.za
legacy.nicd.ac.za
sandae.nicd.ac.za
autodiscover.nicd.ac.za
*.nicd.ac.za
download.nicd.ac.za
mstrmobile.nicd.ac.za
bramexweb.nicd.ac.za
query.nicd.ac.za
www.salavirtual.retransmision.mx
nicdsandowas.nicd.ac.za
ptschemes.nicd.ac.za
ptschemes.nicd.ac.za
securelogin.nicd.ac.za
webmail.nicd.ac.za
gis.nicd.ac.za
www.foodiebot.recipes
query.nicd.ac.za
webmail.nicd.ac.za
autodiscover.nicd.ac.za
download.nicd.ac.za
ptschemes.nicd.ac.za
webmail.nicd.ac.za
autodiscover.nicd.ac.za
laviwoodsculpting.com
webmail.nicd.ac.za
nicdeocvcsc01.nicd.ac.za
autodiscover.nicd.ac.za
legacy.nicd.ac.za
sandexweb.nicd.ac.za
www.korley.net
sandexweb.nicd.ac.za
bramae.nicd.ac.za
app.bridgetownresearch.org

Certificate

The complete raw certificate details for *.nicd.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGwjCCBaqgAwIBAgIRAJyjOnFIVDbDAAAAAFD1EucwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwNzMwMDc0OTEzWhcNMjAwNzMwMDgxOTEyWjBoMQswCQYDVQQGEwJaQTEVMBMG
A1UEBxMMSm9oYW5uZXNidXJnMSswKQYDVQQKEyJOYXRpb25hbCBIZWFsdGggTGFi
b3JhdG9yeSBTZXJ2aWNlMRUwEwYDVQQDDAwqLm5pY2QuYWMuemEwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEBeEBevVHJ+Cb4cvE+XM4fhzBMedx/XQ
bBmKbK5vIndMTxTAAsuLlxlgJQNTZZfW+3A5f1hrjxGruzc5nlgJMlFVujSL/1dy
yrLOJ7aFVtS32p0y7htR/PGWcD5rm1avc7CRuoUf13bSX/mSkSBcE8i5llUKCE53
FGyjqammhgumE0ZnnEsfZmQqHH8g3Unf6OFBAFL/O3oAVlYztRKJJElAASb6CsME
sgJUf1HRWW1NLTOEfhbvD1k1kZu8WvLUx3n42uP+eo3e/89U1QKeYbsVgfmOuM04
keUP1ozeiz6X7rIyiPJfPTSXaQ8mo4HGUX6Jvt18DRWqFLG9X8IXAgMBAAGjggMS
MIIDDjAjBgNVHREEHDAaggwqLm5pY2QuYWMuemGCCm5pY2QuYWMuemEwggF/Bgor
BgEEAdZ5AgQCBIIBbwSCAWsBaQB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+j
qh0HE9MMAAABbEH2RlYAAAQDAEcwRQIhAJYRwRHCgb5MHzFmSY/uKNBn9uL6iUpM
Bjonkd1YXDd1AiAHi25JoJxDw2B/Y4e24j+5ALaaLyuKPcVE1jTswF84zwB3AId1
v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbEH2RlIAAAQDAEgwRgIh
AMM5hNpsTdBIs4B5Q06eLsbKkTEZW5WsM/suSXKj6BGYAiEApgpUDrmcr5bSmW54
WkM8n5sFzcsdnDMkcYJcPhdOEjEAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOey
SVMt74uQXgAAAWxB9kZhAAAEAwBHMEUCIQCT7bg9pXmBjx0FBDP04nl5yzrNg1Qv
gTLILpoborSjJQIgFrOm9y9+fabLhEMgRJJWyuGNLs1Bj7DVHI3i1qcaM+IwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNV
HR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3Js
MEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
d3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMG
CCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYn
aHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQY
MBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBTqNnFOeuNQO/cQzrDb
1rEAvZmR6jAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAwT2XSK0kE1dAD
cCeII50O8q9TKTH1iDXyALpr7RhK6P57SJ+XBhTb5u8tBxWXFHoFgEgsqXyeqAFT
z4JJ4p4FATEFvEylQHkQqlNKt+6ZVs8WsP4vnEcnwcDlpmyesYPvHkdhotL9p3NT
dQBJetNWp9ygsVj36IlNYuRmXJ69OEsLh1XhYgpfbouTycjiDlP0IEl+jaxiLb7K
aeb5CWahFg8LpvrxL8SyX2v8mjNJz7wKZ07/oOctB57gIWugBCBKUaKp2J1r7zJ3
QdDRsVT+TVfuM4EQLmF2ANB4AEziuCfZWcI+X6D0uTuV1UFnh0oLzCvx6DlWg3TV
G0oVZelg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RAXhAXr1Ryfgm+HLxPl
zOH4cwTHncf10GwZimyubyJ3TE8UwALLi5cZYCUDU2WX1vtwOX9Ya48Rq7s3OZ5Y
CTJRVbo0i/9Xcsqyzie2hVbUt9qdMu4bUfzxlnA+a5tWr3OwkbqFH9d20l/5kpEg
XBPIuZZVCghOdxRso6mppoYLphNGZ5xLH2ZkKhx/IN1J3+jhQQBS/zt6AFZWM7US
iSRJQAEm+grDBLICVH9R0VltTS0zhH4W7w9ZNZGbvFry1Md5+Nrj/nqN3v/PVNUC
nmG7FYH5jrjNOJHlD9aM3os+l+6yMojyXz00l2kPJqOBxlF+ib7dfA0VqhSxvV/C
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 208207097085312158066088752450859504359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 07:49:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-30 08:19:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Health Laboratory Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nicd.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27906600588557105350866656246341590263710847335620542326387630513670930488075893262623432783800467907828651113369854743262209657756916640945376621186416055130939520119677623670454428183014671871154623709524377681895703795113130625121190753955632429403608754260145042763739564488555939147427201673575982712426133357510921596649886774688742670273711532369577834800441230663205995713512515574898204689989922368551236117982674253767981749708155732463397817108853357501893005474444705636248789534170894972036197460896358437621182550039561522276086173263758373779337685245349880006388390374120482742308068234403449277497879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicd.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicd.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea36714e7ae3503bf710ceb0dbd6b100bd9991ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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