h2oremote.cityofwhittier.org
- City of Whittier -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 1d:1e:b0:94:50:c9:b0:e1:b7:02:cb:41:12:32:eb:bb was issued on by Entrust, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
City of Whittier
Organization:
City of Whittier
State / Province:
California
Locality: Whittier
Country: US
Locality: Whittier
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 1d:1e:b0:94:50:c9:b0:e1:b7:02:cb:41:12:32:eb:bbSerial Number (int): 38706962238379530123838771942275607483
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 1f:3f:a1:04:81:66:50:77:b0:ba:ee:5e:6e:5b:e7:3d:0e:36:72:d5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): d5:45:96:48:09:06:14:34:5d:e6:60:d5:72:ee:f1:0c:67:e9:5b:55
Fingerprint (sha256): 72:3d:ea:07:dc:4b:b6:35:a6:aa:b1:70:0d:70:f5:11:04:88:59:1e:a2:f3:e1:4a:f7:1f:9c:80:84:01:b7:0a
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate h2oremote.cityofwhittier.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for h2oremote.cityofwhittier.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
h2oremote.cityofwhittier.org
Other certificates including the domain name cityofwhittier.org
(limited to 100 certificates)
mail.whittierch.org
san-g2.granicusgovaccess.net
online.cityofwhittier.org
cityofwhittier.org
helpdesk.deistermachine.com
guest.cityofwhittier.org
fs.cityofwhittier.org
mail.whittierch.org
support.cityofwhittier.org
helpdesk.gapsi.com
online.cityofwhittier.org
san-a2.granicusgovaccess.net
help.lafayetteco.gov
online.cityofwhittier.org
techsupport.maxsold.com
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
support.sifco.com
san-g2.granicusgovaccess.net
hermes.whittierch.org
mail.whittierch.org
support.cityofwhittier.org
online.cityofwhittier.org
cityofwhittier.org
online.cityofwhittier.org
*.cityofwhittier.org
support.cityofwhittier.org
online.cityofwhittier.org
support.sifco.com
techsupport.maxsold.com
cityofwhittier.org
san-g2.granicusgovaccess.net
helpdesk.deistermachine.com
mail.whittierch.org
www.cityofwhittier.org
support.cityofwhittier.org
online.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
mail.whittierch.org
help.lafayetteco.gov
mail.whittierch.org
h2oremote.cityofwhittier.org
online.cityofwhittier.org
help.lafayetteco.gov
san-g2.granicusgovaccess.net
fs.cityofwhittier.org
online.cityofwhittier.org
hermes.whittierch.org
hermes.whittierch.org
cityofwhittier.org
san-a2.granicusgovaccess.net
mft.cityofwhittier.org
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
san-f2.granicusgovaccess.net
san-a2.granicusgovaccess.net
fs.cityofwhittier.org
guest.cityofwhittier.org
help.lafayetteco.gov
san-g2.granicusgovaccess.net
online.cityofwhittier.org
san-g2.granicusgovaccess.net
cityofwhittier.org
mft.cityofwhittier.org
helpdesk.gapsi.com
san-a2.granicusgovaccess.net
mft.cityofwhittier.org
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
cityofwhittier.org
online.cityofwhittier.org
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
guest.cityofwhittier.org
mft.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
online.cityofwhittier.org
cityofwhittier.org
san-g2.granicusgovaccess.net
cityofwhittier.org
techsupport.maxsold.com
cityofwhittier.org
mail.cityofwhittier.org
www.cityofwhittier.org
san-a2.granicusgovaccess.net
techsupport.maxsold.com
mail.whittierch.org
www.cityofwhittier.org
fs.cityofwhittier.org
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
www.cityofwhittier.org
san-g2.granicusgovaccess.net
online.cityofwhittier.org
cityofwhittier.org
helpdesk.deistermachine.com
guest.cityofwhittier.org
fs.cityofwhittier.org
mail.whittierch.org
support.cityofwhittier.org
helpdesk.gapsi.com
online.cityofwhittier.org
san-a2.granicusgovaccess.net
help.lafayetteco.gov
online.cityofwhittier.org
techsupport.maxsold.com
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
support.sifco.com
san-g2.granicusgovaccess.net
hermes.whittierch.org
mail.whittierch.org
support.cityofwhittier.org
online.cityofwhittier.org
cityofwhittier.org
online.cityofwhittier.org
*.cityofwhittier.org
support.cityofwhittier.org
online.cityofwhittier.org
support.sifco.com
techsupport.maxsold.com
cityofwhittier.org
san-g2.granicusgovaccess.net
helpdesk.deistermachine.com
mail.whittierch.org
www.cityofwhittier.org
support.cityofwhittier.org
online.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
mail.whittierch.org
help.lafayetteco.gov
mail.whittierch.org
h2oremote.cityofwhittier.org
online.cityofwhittier.org
help.lafayetteco.gov
san-g2.granicusgovaccess.net
fs.cityofwhittier.org
online.cityofwhittier.org
hermes.whittierch.org
hermes.whittierch.org
cityofwhittier.org
san-a2.granicusgovaccess.net
mft.cityofwhittier.org
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
san-f2.granicusgovaccess.net
san-a2.granicusgovaccess.net
fs.cityofwhittier.org
guest.cityofwhittier.org
help.lafayetteco.gov
san-g2.granicusgovaccess.net
online.cityofwhittier.org
san-g2.granicusgovaccess.net
cityofwhittier.org
mft.cityofwhittier.org
helpdesk.gapsi.com
san-a2.granicusgovaccess.net
mft.cityofwhittier.org
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
cityofwhittier.org
online.cityofwhittier.org
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
guest.cityofwhittier.org
mft.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
online.cityofwhittier.org
cityofwhittier.org
san-g2.granicusgovaccess.net
cityofwhittier.org
techsupport.maxsold.com
cityofwhittier.org
mail.cityofwhittier.org
www.cityofwhittier.org
san-a2.granicusgovaccess.net
techsupport.maxsold.com
mail.whittierch.org
www.cityofwhittier.org
fs.cityofwhittier.org
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
www.cityofwhittier.org
Certificate
The complete raw certificate details for h2oremote.cityofwhittier.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIQHR6wlFDJsOG3AstBEjLruzANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDAzMjYxODU4MTRaFw0yNTAzMjYxODU4MTNaMHcxCzAJBgNVBAYTAlVTMRMwEQYD VQQIEwpDYWxpZm9ybmlhMREwDwYDVQQHEwhXaGl0dGllcjEZMBcGA1UEChMQQ2l0 eSBvZiBXaGl0dGllcjElMCMGA1UEAxMcaDJvcmVtb3RlLmNpdHlvZndoaXR0aWVy Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcE0DmQexFOWofL 4FLczLvh3qvU1JhelqynwqqY04MisDWpFsiocTwO4ulXZEGMQwZAZLmD4jHekTB3 g4rK1eTAYSCLelW6v3vC4Ksk7DvBFGx/NwM2SPs+X8GgySnimh1WWzZdBEuyU4ku NNwCWyLXJLCK6bX2hs9MBRt5vWZKRbJrGLGyF3hO+1F6+HqRHMVPSJzofQJtxi9Q Be21WX8WpdQHKs/1TjLKeX28pLGa24MayG0ChMW0CeMgknKampESdMoUTch+9b6M 8LdWzZ6rN3foNOOuOZAMhozlywRILNa2OG5uWbUwx8/vhO9q0FCApipvN7vF9aSj se5YlgcCAwEAAaOCAXMwggFvMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFB8/oQSB ZlB3sLruXm5b5z0ONnLVMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/ MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVz dC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNo YWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3Qu bmV0L2xldmVsMWsuY3JsMCcGA1UdEQQgMB6CHGgyb3JlbW90ZS5jaXR5b2Z3aGl0 dGllci5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjATBgNVHSAEDDAKMAgGBmeBDAECAjATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAoe49pfoIWNFFVTocOzUcTlFEU7WOLoRBoBKf r2Oca1rGsTmyq8llOIMjTumwIw4kJhnhzLsC8m1V/8/vkctU5e5GJ8XU0wfl+GSQ 4kMVcCAu9fNA1/HYfy9ZrpOhaKIfLq0vDc+MjI1QQOcjtzHwqUGu3bOvnewW4c7z HV37O92bXKQfP6ymLEi+erjVOM4eDRqnDStReoMeJoxa257HvQRAyig/k3j+j4Ol s0opEp1NxIGzCe8qg7rIcKnvb2N67CazaFT92jp5agje75X/ujU4NTxwbMXawjsI INAM2jQ/P6fgh7sfsilh9tE1Q6fRDEIckqU6lD9Crx1y2Z9bkQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwTQOZB7EU5ah8vgUtzM u+Heq9TUmF6WrKfCqpjTgyKwNakWyKhxPA7i6VdkQYxDBkBkuYPiMd6RMHeDisrV 5MBhIIt6Vbq/e8LgqyTsO8EUbH83AzZI+z5fwaDJKeKaHVZbNl0ES7JTiS403AJb ItcksIrptfaGz0wFG3m9ZkpFsmsYsbIXeE77UXr4epEcxU9InOh9Am3GL1AF7bVZ fxal1Acqz/VOMsp5fbyksZrbgxrIbQKExbQJ4yCScpqakRJ0yhRNyH71vozwt1bN nqs3d+g04645kAyGjOXLBEgs1rY4bm5ZtTDHz++E72rQUICmKm83u8X1pKOx7liW BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38706962238379530123838771942275607483 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 18:58:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-26 18:58:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whittier' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Whittier' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'h2oremote.cityofwhittier.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23103983374123366408616976929333950132704729982041466522246378782341192032460585197204263883100711212704558743080411653974804044501142088346703280051471394766945677391972056351023868746934737484837944003964871274001656760438893468182057596801677106550805060747708268803775805391703850822027565021194147726279527332672419510518346088250219458878032484081170071959211534847233634008231202540285645284070781563739317338397728099401702257534603633692529489958867598780268072230128084349300463751297240871536471865560298106881335987295364274076203084755847261945490800320057840376730724326190661668680646932885689505191431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1f3fa10481665077b0baee5e6e5be73d0e3672d5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2oremote.cityofwhittier.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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