imageserver.secureweb.accp.ia.iafg.net

- Industrial Alliance Insurance and Financial Services Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 31:ed:e2:0e:64:16:29:85:00:00:00:00:50:ff:88:7e was issued on by Entrust, Inc..

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrial Alliance Insurance and Financial Services Inc.

Organization: Industrial Alliance Insurance and Financial Services Inc.
State / Province: Quebec
Locality: Quebec
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 31:ed:e2:0e:64:16:29:85:00:00:00:00:50:ff:88:7e
Serial Number (int): 66367331113673625818073600146672683134
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 69:3b:4d:f1:05:72:1d:94:4c:69:95:a0:bb:24:f8:71:44:01:b9:1d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 50:e1:da:1d:dc:9c:be:5a:94:ec:ad:e1:c0:3a:7e:56:e8:08:85:97
Fingerprint (sha256): 75:72:68:12:2a:b4:43:78:a5:ee:08:8f:c3:b7:f1:80:93:37:98:72:df:19:f5:ce:b4:47:5a:46:62:da:1a:06

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate imageserver.secureweb.accp.ia.iafg.net

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imageserver.secureweb.accp.ia.iafg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imageserver.secureweb.accp.ia.iafg.net
acura.accp.secureweb.ia.iafg.net
aonc.secureweb.accp.ia.iafg.net
bnta.secureweb.accp.ia.iafg.net
bntc.secureweb.accp.ia.iafg.net
bnte.accp.secureweb.ia.iafg.net
bnte.secureweb.accp.ia.iafg.net
burrowesc.secureweb.accp.ia.iafg.net
contentserver.secureweb.accp.ia.iafg.net
crmmobile.iaa.accp.secureweb.ia.iafg.net
fundexa.accp.secureweb.ia.iafg.net
holliswealtha.accp.secureweb.ia.iafg.net
honda.accp.secureweb.ia.iafg.net
iaa.secureweb.accp.ia.iafg.net
iac.secureweb.accp.ia.iafg.net
iae.secureweb.accp.ia.iafg.net
iae.accp.secureweb.ia.iafg.net
iapa.secureweb.accp.ia.iafg.net
iapc.secureweb.accp.ia.iafg.net
iape.secureweb.accp.ia.iafg.net
iaprtnr.accp.secureweb.ia.iafg.net
iapunifia.secureweb.accp.ia.iafg.net
investiaa.accp.secureweb.ia.iafg.net
login.accp.secureweb.ia.iafg.net
m.services.accp.secureweb.ia.iafg.net
m.services.accp.secureweb.inalco.com
nfiaa.accp.secureweb.ia.iafg.net
nfiaai.accp.secureweb.ia.iafg.net
services.secureweb.accp.ia.iafg.net
sps.accp.secureweb.ia.iafg.net
sps.accp.secureweb.ia.ca
we.secureweb.accp.ia.iafg.net

Other certificates including the domain name iafg.net

(limited to 100 certificates)
securefonc.inalco.com
*.iagextp01-cae-ase-prod-01.ase.ia.iafg.net
webmail.inalco.com
sva0735.ia.iafg.net
iagomnip01-cac-aks-cw-01.aks.ia.iafg.net
authentification.intg.secureweb.ia.iafg.net
api.AutoriteCertification.ia.iafg.net
iafg.net
iafg.net
accp.login.service.dealers.ia.iafg.net
iagtelc01-cac-ise01.iafg.net
el-nxportal.accp.part.iafg.net
fs52.ia.ca
iafg.net
*.asmb.secureweb.ia.ca
test.ee-tokenapi.accp.webapp.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
expw-e.uc.iafg.net
MQ-Investments-PTS-BYM-02-PROD.iafg.net
expw-e.uc.iafg.net
fs52.ia.ca
proxy.intg.secureweb.ia.ca
*.intg.secureweb.ia.ca
dev.login.service.dealers.ia.iafg.net
*.prod.ia.iafg.net
el-nxportal-mpls-dr.prod.part.iafg.net
se.webgateway.accp.ia.iafg.net
*.intg.ia.iafg.net
*.intg.sitecore.ia.iafg.net
iafg.net
sva0890.ia.iafg.net
webmail.ia.ca
iaginfrp01.azure.ia.iafg.net
sva0736.ia.iafg.net
sva0767.ia.iafg.net
expw-e.uc.iafg.net
sva0735.ia.iafg.net
iafg.net
authentification.asmb.secureweb.ia.iafg.net
accp.login.service.dealers.ia.iafg.net
api.EntrustAutomation.ia.iafg.net
ref.dev.azure.ia.iafg.net
se.webgateway.ia.iafg.net
*.intg.secureweb.ia.ca
sva0737.ia.iafg.net
iagtelc01-cae-ise01.iafg.net
fs52.ia.ca
iaginfrp01-itsm.azure.ia.iafg.net
sva0736.ia.iafg.net
iagclienta01.azure.ia.iafg.net
hdwqc032.ia.iafg.net
fs52.ia.iafg.net
*.prod.ia.iafg.net
iagomnid01-cac-aks-cw-01.dev.aks.ia.iafg.net
ref.dev.azure.ia.iafg.net
*.dev.sitecore.ia.iafg.net
MQ-Investments-PTS-BYM-02-DEV.iafg.net
webmail.ia.ca
api.EntrustAutomation.ia.iafg.net
sva1391.ia.iafg.net
secureweb.fnct.api.ia.iafg.net
iafg.net
se.webgateway.intg.ia.iafg.net
iafg.net
*.sitecore.ia.iafg.net
ee-tokenapi.intg.webapp.ia.iafg.net
portail-accp-01.wifi.ia.ca
dev.login.service.dealers.ia.iafg.net
secureweb.accp.api.ia.iafg.net
se.webgateway.ia.iafg.net
jira.iaah.iafg.net
*.fnct.sitecore.ia.iafg.net
el-nxpace-mpls-dr.prod.part.iafg.net
iaginfrd01-itsm.azure.ia.iafg.net
sva1389.ia.iafg.net
sva0891.ia.iafg.net
secureweb.intg.api.ia.iafg.net
lidqca8.ia.iafg.net
ref.dev.azure.ia.iafg.net
secureweb.asmb.api.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
se.webgateway.intg.ia.iafg.net
accp.api.ia.iafg.net
*.accp.websct.ia.iafg.net
*.accp.ia.iafg.net
beyondinsight.intg.ia.iafg.net
*.prod.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
*.iagextp01-cac-ase-prod-01.ase.ia.iafg.net
iaginfra01.azure.ia.iafg.net
*.intg.websct.ia.iafg.net
webmail.ia.ca
iaginfrl01.azure.ia.iafg.net
expw-e.uc.iafg.net
iafg.net
*.accp.sitecore.ia.iafg.net
se.webgateway.intg.ia.iafg.net
iagcorpd01.azure.ia.iafg.net
sva1390.ia.iafg.net

Certificate

The complete raw certificate details for imageserver.secureweb.accp.ia.iafg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd/aGMJjq60slM387kMm
98id/MQxUokRpNlRDNdVn3Qy0clSbQmYa3qfvueXnIFdet1xYB9/1HEwceYuHVpU
atevWrDXNKaml2zcEcBmAxe3BJXSfXym/l88M1ybyXPTJAsR2NXDJHdaObdHTwQZ
3RvPVguzUKSO0ss1/ZTw3e3mWZJCuagq7b7e/xxAsCFm9sD59nttN+aepWER5kQU
Y1C79nGBFXmAqZBz9tWSNASVpUfTFw0nQX8OR5KFpnm6F5ZhhvwYutjl3iD0h2V7
9I7A5DshnL7CxjNAe+PMswEtVL+jWH0TXfT5WfT/QHUjOf5R6U3ku8QEbxOIQ7/9
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66367331113673625818073600146672683134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 12:35:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-22 13:05:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imageserver.secureweb.accp.ia.iafg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23969425144469895250101238077179843479769582371054417278605122576260070842058810425964764430314966682260524301347365846081368390940029540464798538207626831625870115854602253124983362564615275086887949692560436211348148270675358078128424812224930228342361125872367025355614672009312350149281101957990408975607513955684010869511807859617463471340966405962853331051316983743749714838962014716956018155699732841012626946189778292475401674408490163646060798711102612949670515340376277964375057914453018568192421785295146931974886274293439398105628443982179561470960798018265505876434579378784045671497232801699753325755683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageserver.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acura.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aonc.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnta.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bntc.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnte.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnte.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burrowesc.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentserver.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmmobile.iaa.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundexa.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holliswealtha.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honda.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaa.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iac.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iae.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iae.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iapa.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iapc.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iape.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaprtnr.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iapunifia.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investiaa.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.services.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.services.accp.secureweb.inalco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfiaa.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfiaai.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps.accp.secureweb.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps.accp.secureweb.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we.secureweb.accp.ia.iafg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							693b4df105721d944c6995a0bb24f8714401b91d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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