mail.nokia.com

- Nokia Corporation -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4b:20:52:d5 was issued on by Entrust, Inc..

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Nokia Corporation

Organization: Nokia Corporation
Organization unit: IT
Locality: Espoo
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:20:52:d5
Serial Number (int): 1260409557
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 43:4d:c0:6f:ae:76:59:67:c3:4d:f9:f9:e9:8a:dc:8f:7f:11:1d:b9
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): f4:02:57:3c:73:69:b0:bf:83:9a:d1:5b:2c:d9:e9:e5:47:39:9d:6e
Fingerprint (sha256): 7c:5f:0b:b4:08:ad:da:4b:cb:5f:6b:d8:2c:40:ac:45:49:c5:73:8a:ce:f7:ee:42:4e:ed:e4:c7:14:5f:c9:96


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate mail.nokia.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.nokia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.nokia.com
autodiscover.darkstar.nokia.com
autodiscover.gate5.de
autodiscover.intellisync.com
autodiscover.itspixies.com
autodiscover.mobilerules.org
autodiscover.n-gage.com
autodiscover.nokia.mobi
autodiscover.nokiaforbusiness.com
autodiscover.od2.com
autodiscover.ovi.com
autodiscover.pumatech.com
autodiscover.santa-sightings.com
autodiscover.shareideas.org
autodiscover.synchrologic.com
autodiscover.tourmalinenetworks.com
autodiscover.vertu.com
autodiscover.nokia.com
autodiscover.indt.org.br
autodiscover.ovi.com.cn
backup.mail.nokia.com
nokia.com
besma.nokia.com
mail-cs.nokia.com
archive.nokia.com
backup.archive.nokia.com
clientsmtp.nokia.com
mail101.nokia.com
mail102.nokia.com
mail201.nokia.com

Other certificates including the domain name nokia.com

(limited to 100 certificates)
trade.online.nokia.com
www.integrationsupplier.nokia.com
sa32gl.adn.edgecastcdn.net
zina.net.nokia.com
build.forum.nokia.com
CUST01-CUCM-SUB-01-CL6.int.net.nokia.com
wpa.int.net.nokia.com
reports.push.nokia.com
bluelounge.nokia.com
gnocportal.ext.net.nokia.com
maps.nokia.com
erp.int.net.nokia.com
es4labsv52.emea.nsn-net.net
i2.shared.global.fastly.net
si.odc.nokia.com
em1x-372.lhr.messaging.nokia.com
email.nokia.com
san3.here.com
download-src-sl-01.mh.nokia.com
msm.iot.nokia.com
sits-support.ext.net.nokia.com
marketstage.nokia.com
xesefe100.ext.nokia.com
NOKIALYNCPOOL1.nnok.nokia.com
svcprdext2.support.alcatel-lucent.com
qc-prod.int.net.nokia.com
support.health.nokia.com
rmscert-noe.nokia.com
trade.online.nokia.com
edi.ext.net.nokia.com
docs.in.nokia.com
nra-americas-us-dal-vip.net.nokia.com
cdp.trial.nokia.com
homewifi.nokia.com
learningstore.nokia.com
esitv346lab.nokia.com
stg.data.nokia.com
myaccessdev.app.nokia.com
ushare.ovi.com.cn
nra-brazil-1.net.nokia.com
supportforum.networks.nokia.com
account.tw.mobileshop.nokia.com
sa12gl.wpc.edgecastcdn.net
focalpoint-qa.int.net.nokia.com
api.demo.digital-assistant.nokia.com
origin.company.nokia.com
gsdanalytics.net.nokia.com
myportal-s50.int.net.nokia.com
appupdate.qa.nokia.com
payment.perf.ovi.com
cust01-expc-cl2-e01.nokia.com
staging-mika.nokia.com
staging-aslm.nokia.com
support.idc.nokia.com
dms.qa.europe.fox.nokia.com
gim.net.nokia.com
partner.west.us.dac.nokia.com
hybrid2.ext.net.nokia.com
finland.partners.nokiasiemensnetworks.com
cap-test.places.dev.api.here.com
direct.noltest.trade.online.nokia.com
nra-apac-sg-sin-vip.net.nokia.com
cloud-lab.ext.net.nokia.com
ushare.ovi.com.cn
im.stg.mc102.atl.messaging.nokia.com
san1.nokia.com
nra-india.net.nokia.com
sahdr001.europe.nokia.com
collab.nokia.com
secure0133.hubspot.com
i2.shared.global.fastly.net
moslacap.net.nokia.com
developer.nokia.com
erm.int.net.nokia.com
odin.in.here.com
nra-apac-sg-sin-2.net.nokia.com
mywfmdeuroafrica.ext.net.nokia.com
NOKIALYNCPOOL1.nnok.nokia.com
extranet-nes-portal.int.net.nokia.com
learningservicesdevlabs.nokia.com
nattcdpb.saas.nokia.com
share-qa.int.net.nokia.com
vpn.nokia.com
estelco2.ext.net.nokia.com
gerrit-staging.int.net.nokia.com
sa12gl.wpc.edgecastcdn.net
iris-qa.net.nokia.com
nra-emea-pl-wro-2.net.nokia.com
CUST01-CUCM-SUB-10-CL9.int.net.nokia.com
zina.net.nokia.com
tools.ext.nokia.com
sip.ucfederation.com
gerrit.ext.net.nokia.com
placescontent.nokia.com
inventwithnokia.nokia.com
sa12gl.wpc.edgecastcdn.net
prd-www.networks.nokia.com
CUST01-CUCM-SUB-02-CL6.int.net.nokia.com
scbe.api.here.com
logistics-qa.ext.net.nokia.com

Certificate

The complete raw certificate details for mail.nokia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgIESyBS1TANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMDAxMTMxNDI4MDZaFw0xMzAxMTIx
NDU4NDlaMF8xCzAJBgNVBAYTAkZJMQ4wDAYDVQQHEwVFc3BvbzEaMBgGA1UEChMR
Tm9raWEgQ29ycG9yYXRpb24xCzAJBgNVBAsTAklUMRcwFQYDVQQDEw5tYWlsLm5v
a2lhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMx0BfKgL/Ex
Ov5upjILAH4eZXaFNmqcvQfy69YM5uF+bNQyrEZ4P5UKwAXoPha4GCzWffIkym5v
pIatIoGy6kz7n73sXXVEhRh09vz/8obnrKbE9+4GOZ/6OTybGAjpYNQaXlVO2N+z
tIWvWUsuqnpoT/anNmKz/bZG73MM9xNOwwNtTF1Baxf62r+J2mUTBoK0Sqt6Xoov
w+C5nlw9zaO86iFuZYLWqmi3Pju1RGzGqRSURgBu1CLUp8RewDtcNXXaRTNHesNt
Xa93IH+mTO8eXjqWPduhVRnHWnDsqlX9UYvH+h5MbjCWZHYArrUNaPM5VnppYcMY
Ix0jCdQFk9kCAwEAAaOCBBwwggQYMAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5l
bnRydXN0Lm5ldC9sZXZlbDFjLmNybDAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MEAGA1UdIAQ5MDcwNQYJKoZIhvZ9
B0sCMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMIIC
8QYDVR0RBIIC6DCCAuSCDm1haWwubm9raWEuY29tgh9hdXRvZGlzY292ZXIuZGFy
a3N0YXIubm9raWEuY29tghVhdXRvZGlzY292ZXIuZ2F0ZTUuZGWCHGF1dG9kaXNj
b3Zlci5pbnRlbGxpc3luYy5jb22CGmF1dG9kaXNjb3Zlci5pdHNwaXhpZXMuY29t
ghxhdXRvZGlzY292ZXIubW9iaWxlcnVsZXMub3JnghdhdXRvZGlzY292ZXIubi1n
YWdlLmNvbYIXYXV0b2Rpc2NvdmVyLm5va2lhLm1vYmmCIWF1dG9kaXNjb3Zlci5u
b2tpYWZvcmJ1c2luZXNzLmNvbYIUYXV0b2Rpc2NvdmVyLm9kMi5jb22CFGF1dG9k
aXNjb3Zlci5vdmkuY29tghlhdXRvZGlzY292ZXIucHVtYXRlY2guY29tgiBhdXRv
ZGlzY292ZXIuc2FudGEtc2lnaHRpbmdzLmNvbYIbYXV0b2Rpc2NvdmVyLnNoYXJl
aWRlYXMub3Jngh1hdXRvZGlzY292ZXIuc3luY2hyb2xvZ2ljLmNvbYIjYXV0b2Rp
c2NvdmVyLnRvdXJtYWxpbmVuZXR3b3Jrcy5jb22CFmF1dG9kaXNjb3Zlci52ZXJ0
dS5jb22CFmF1dG9kaXNjb3Zlci5ub2tpYS5jb22CGGF1dG9kaXNjb3Zlci5pbmR0
Lm9yZy5icoIXYXV0b2Rpc2NvdmVyLm92aS5jb20uY26CFWJhY2t1cC5tYWlsLm5v
a2lhLmNvbYIJbm9raWEuY29tgg9iZXNtYS5ub2tpYS5jb22CEW1haWwtY3Mubm9r
aWEuY29tghFhcmNoaXZlLm5va2lhLmNvbYIYYmFja3VwLmFyY2hpdmUubm9raWEu
Y29tghRjbGllbnRzbXRwLm5va2lhLmNvbYIRbWFpbDEwMS5ub2tpYS5jb22CEW1h
aWwxMDIubm9raWEuY29tghFtYWlsMjAxLm5va2lhLmNvbTAfBgNVHSMEGDAWgBQe
8auJBvhJDwEzd+4Ueu4ZfJMoTTAdBgNVHQ4EFgQUQ03Ab652WWfDTfn56Yrcj38R
HbkwCQYDVR0TBAIwADANBgkqhkiG9w0BAQUFAAOCAQEAVpDOqKhFwc+ekgZXudBl
6JyjnjUJLZ+c4w0D2BPgmtSaG3rfOZZFtbb75fxcisT/O+YIFxguZk35BSfpcyQz
u5J4ltcfT5eD28NymjTsHdZUwhGtOeT+GG8YCPk2EsDB3DpYQrXFHL6NuqnS/iKm
Gh2LBXqTrmNHk7ry3n3mwluqBvH9jXOB/luhxumokl2KL97eLQ4e21RJARmgXxWS
wMU5JNpDULqnqGtGy1xBXvKZQ3fSJEcRgIl79WWpmiqID/lsU/5yUEj2tWPcf0ty
orPfbepl8ZKhfGsk4tncDEBhouEpVa/wb5L+63ltKkxu8tLAmyYsX/H61m5gQ8pr
Vw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHQF8qAv8TE6/m6mMgsA
fh5ldoU2apy9B/Lr1gzm4X5s1DKsRng/lQrABeg+FrgYLNZ98iTKbm+khq0igbLq
TPufvexddUSFGHT2/P/yhuespsT37gY5n/o5PJsYCOlg1BpeVU7Y37O0ha9ZSy6q
emhP9qc2YrP9tkbvcwz3E07DA21MXUFrF/rav4naZRMGgrRKq3peii/D4LmeXD3N
o7zqIW5lgtaqaLc+O7VEbMapFJRGAG7UItSnxF7AO1w1ddpFM0d6w21dr3cgf6ZM
7x5eOpY926FVGcdacOyqVf1Ri8f6HkxuMJZkdgCutQ1o8zlWemlhwxgjHSMJ1AWT
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1260409557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-01-13 14:28:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-12 14:58:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Espoo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nokia Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.nokia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25809827401842503934189617582988779407922735329162073301976080096618074989240685802270953938770484201713883200132454418381964390982462106643489133779687083211896571006487853315543709585159409077499131426722011481606274499940731157992576212077096371955117121359008606358460076199823514229160668723165822400571490266881537924606109778039427234183379468909150157471599854493118349762548886325248193361273112470431669185683333399120476974487889466522284058129166259393589913069815390713773156060282454222979531704803879191635528569846803934644863595770284715579830992849391951565992881399693497072397764342471686030201817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (744 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.darkstar.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gate5.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.intellisync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.itspixies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mobilerules.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.n-gage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nokia.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nokiaforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.od2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pumatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.santa-sightings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.shareideas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.synchrologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tourmalinenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vertu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.indt.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ovi.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.mail.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besma.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-cs.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.archive.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsmtp.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail101.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail102.nokia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail201.nokia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							434dc06fae765967c34df9f9e98adc8f7f111db9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005690cea8a845c1cf9e920657b9d065e89ca39e35092d9f9ce30d03d813e09ad49a1b7adf399645b5b6fbe5fc5c8ac4ff3be60817182e664df90527e9732433bb927896d71f4f9783dbc3729a34ec1dd654c211ad39e4fe186f1808f93612c0c1dc3a5842b5c51cbe8dbaa9d2fe22a61a1d8b057a93ae634793baf2de7de6c25baa06f1fd8d7381fe5ba1c6e9a8925d8a2fdede2d0e1edb54490119a05f1592c0c53924da4350baa7a86b46cb5c415ef2994377d224471180897bf565a99a2a880ff96c53fe725048f6b563dc7f4b72a2b3df6dea65f192a17c6b24e2d9dc0c4061a2e12955aff06f92feeb796d2a4c6ef2d2c09b262c5ff1fad66e6043ca6b57