contrib-preprod-origin.group.bnpparibas

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 24:a7:7f:49:f5:81:f5:10:95:fe:d6:52:f8:6e:bc:60 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:a7:7f:49:f5:81:f5:10:95:fe:d6:52:f8:6e:bc:60
Serial Number (int): 48721903149288751064646481737811934304
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 30:6c:c5:e7:7a:0c:72:aa:7d:32:d3:1e:86:eb:67:51:15:f8:21:9a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 66:e8:f7:f1:bc:1f:eb:fb:6b:b9:dc:65:c4:b8:84:19:4c:8e:60:99
Fingerprint (sha256): 83:fe:33:25:e6:51:d2:37:54:76:b9:3e:3b:16:0e:5b:cd:2d:66:e6:11:0a:13:87:28:d0:93:ec:04:f4:18:92

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate contrib-preprod-origin.group.bnpparibas

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contrib-preprod-origin.group.bnpparibas

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

contrib-preprod-origin.group.bnpparibas
www.contrib-preprod-origin.group.bnpparibas

Other certificates including the domain name group.bnpparibas

(limited to 100 certificates)
group.bnpparibas.com
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas.com
cdn-preprod-origin.group.bnpparibas
origin.group.bnpparibas
origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
preprod-origin.group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
sso-origin.group.bnpparibas
group.bnpparibas
cdn-preprod-origin.group.bnpparibas
matchmycv.group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas
preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
www.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
www.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
mailhog.contrib-preprod-origin.group.bnpparibas
group.bnpparibas
sso-contrib-preprod-origin.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas

Certificate

The complete raw certificate details for contrib-preprod-origin.group.bnpparibas in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIQJKd/SfWB9RCV/tZS+G68YDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjA2MDIwODU1MzFaFw0yMzA3MDEwODU1MzFaMGwxCzAJBgNVBAYTAkZSMRIwEAYD
VQQHEwlNb250cmV1aWwxFzAVBgNVBAoTDkJOUCBQQVJJQkFTIFNBMTAwLgYDVQQD
Eydjb250cmliLXByZXByb2Qtb3JpZ2luLmdyb3VwLmJucHBhcmliYXMwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzpPVgrBaA942rAsuHQ23xJg/H5Ay
AeEUgY9G6sewBRCPapoBRDIZCD72oWz3c0P9SCLYCF/aRI31zAMB0Eei01eaxFa1
cqyY3Gjx2H0orfuauM6VeP5AeUZxv1ez3ZXdw9AF2/+BStpfFYUFdQNOqfPQcQ2+
RFca5V4n+NoKMNJQqoBkDUcvTrCyrXShXUBPWPUK7S8AcB7IDGoa4zc4843HdMV0
M6sfvtL6ElhL+YMD2gwLOmFozmFcT7JxHYOgKhOSxMtsmVfC7MuRm96zRRkfjWA0
YL33NxmWMZ9nAhKPqCwoG3t44NZiXgHoD/u/5KMQaUAj8U7weGMPfU9NAgMBAAGj
ggNQMIIDTDAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQwbMXnegxyqn0y0x6G62dR
FfghmjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzBoBggrBgEFBQcB
AQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsG
AQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIw
MwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFr
LmNybDBfBgNVHREEWDBWgidjb250cmliLXByZXByb2Qtb3JpZ2luLmdyb3VwLmJu
cHBhcmliYXOCK3d3dy5jb250cmliLXByZXByb2Qtb3JpZ2luLmdyb3VwLmJucHBh
cmliYXMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBMBgNVHSAERTBDMDcGCmCGSAGG+mwKAQUwKTAnBggrBgEFBQcCARYbaHR0
cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjCCAX0GCisGAQQB1nkC
BAIEggFtBIIBaQFnAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoA
AAGBI6CHzAAABAMARzBFAiEAkz+GWydLncjBne4ah3WVh/fTjBpzjkLSHUAm4gOq
A9YCIC1XuVT42s5YV1pt+gmwI3aSYloJbaCRYa4c40nX+u2EAHUAVYHUwhaQNgFK
6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGBI6CH1gAABAMARjBEAiAbpUuNlwe2
BQgicsGjz8UE63LIvaGcTRgm20n3Z5AtRAIgJQausVnVZUtQdJLCrdRogdaMoc+W
J1bneIi8yeHxIKgAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAA
AYEjoIeqAAAEAwBHMEUCIBXhNafE+9twlEfAO1sSYWUKD7OjMcO+sJ4qmZYYtcym
AiEAg7cwYu7PoC+jGhA+KHm/N1xGX3018u4F54lM3sc5rZ0wDQYJKoZIhvcNAQEL
BQADggEBAGc1WRIkDhBMcXs77DoFGObMi/A7VjVGJcvypmU0GWloDb8pGnhl1NeN
u8FiyD1E+9G8drKcHZJgEY3FWxef8nAJNTiGBpNxEq1vFNLH9jQdazPmEanWFwpd
yi2VaQtPqZYuAkYhZeak5ptp95JYUm7ecO6GGD4JcZ5J2Zuy3lKXR1nyLvBnsD0p
shUHRJkNOnMhSojbREVgvz0E/U2PzG5+0MiyrzpJQ9fa9ejxbMCpiNRtXlCODuKL
RLv1U734nbOgTGcYWqjN0Ap9t9OG15YJc0fa9N7NDxCWqu397/FQfZKuW/lDmaSV
Q3ak9tey897S3mZ5SCyHp4/cTx9DPG0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy86T1YKwWgPeNqwLLh0N
t8SYPx+QMgHhFIGPRurHsAUQj2qaAUQyGQg+9qFs93ND/Ugi2Ahf2kSN9cwDAdBH
otNXmsRWtXKsmNxo8dh9KK37mrjOlXj+QHlGcb9Xs92V3cPQBdv/gUraXxWFBXUD
Tqnz0HENvkRXGuVeJ/jaCjDSUKqAZA1HL06wsq10oV1AT1j1Cu0vAHAeyAxqGuM3
OPONx3TFdDOrH77S+hJYS/mDA9oMCzphaM5hXE+ycR2DoCoTksTLbJlXwuzLkZve
s0UZH41gNGC99zcZljGfZwISj6gsKBt7eODWYl4B6A/7v+SjEGlAI/FO8HhjD31P
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48721903149288751064646481737811934304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 08:55:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 08:55:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contrib-preprod-origin.group.bnpparibas'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25728243058492489613270249253632700704070891148074292232102839825866384162242638253632895387535263115191492301292362965020087377306763288176794167254616611937702122362854375977012963364727895432856729079266552080927344479421696406680629959145063401273244787932031711018807535260806654291427062669688745414103374100465649930562955566486498153995264682975754739197455642626850855818799265442520390121600570649935420868707835732270258220717490797264385464243491089955589948510577640671712606737536676983923122805986625823300501755343059699874082512220144176927569445472759044789350170977141467917351540431855205901750093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							306cc5e77a0c72aa7d32d31e86eb675115f8219a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib-preprod-origin.group.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contrib-preprod-origin.group.bnpparibas'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018123a087cc0000040300473045022100933f865b274b9dc8c19dee1a87759587f7d38c1a738e42d21d4026e203aa03d602202d57b954f8dace58575a6dfa09b0237692625a096da09161ae1ce349d7faed840075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018123a087d6000004030046304402201ba54b8d9707b605082272c1a3cfc504eb72c8bda19c4d1826db49f767902d4402202506aeb159d5654b507492c2add46881d68ca1cf962756e77888bcc9e1f120a8007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018123a087aa0000040300473045022015e135a7c4fbdb709447c03b5b1261650a0fb3a331c3beb09e2a999618b5cca602210083b73062eecfa02fa31a103e2879bf375c465f7d35f2ee05e7894cdec739ad9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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