www.yves-rocher.de

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 11:f1:0a:f3:3a:d6:22:02:00:00:00:00:50:f5:74:53 was issued on by Entrust, Inc..

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
Locality: Morbihan
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:f1:0a:f3:3a:d6:22:02:00:00:00:00:50:f5:74:53
Serial Number (int): 23848441565998992073168294689939747923
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: e7:07:fd:a9:6d:9c:98:00:09:54:44:94:46:04:d7:08:e6:2e:22:e7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 97:3a:ee:69:00:0b:07:b2:53:90:6a:5d:e0:68:d2:c2:9c:b2:12:5f
Fingerprint (sha256): 96:94:51:28:02:fe:c1:e5:3b:49:10:d7:a1:ae:0a:35:47:4e:6e:c3:da:5e:71:87:1a:39:bb:80:b1:13:98:5d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.yves-rocher.de

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yves-rocher.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yves-rocher.de
yves-rocher.de
m.yves-rocher.ch
wiki.yves-rocher.de
m.yves-rocher.at
wiki.yves-rocher.at
www.yves-rocher.be
wiki.yves-rocher.ch
m.yves-rocher.be
www.yves-rocher.at
www.yves-rocher.nl
www.yves-rocher.ch
blog.yves-rocher.de
m.yves-rocher.de
www.yvesrocher.com.tr
blog.yves-rocher.es
www.yves-rocher.dk
www.yves-rocher-kz.com
m.yves-rocher.nl
m.yvesrocher.com.tr
m.yvesrocherusa.com
m.yves-rocher.es
www.yves-rocher.no
www.yves-rocher.ua
wiki.yves-rocher.es
m.yves-rocher.se
blog.yves-rocher.nl
m.yves-rocher.no
m.yves-rocher.fi
m.yves-rocher.ua
www.yves-rocher.se
m.yvesrocher.ca
www.yvesrocher.ca
www.yves-rocher.es
m.yves-rocher.dk
www.yves-rocher.co.uk
wiki.yves-rocher.nl
www.yves-rocher.fi
www.yvesrocherusa.com

Other certificates including the domain name yves-rocher.de

(limited to 100 certificates)
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
t-www.yves-rocher.at
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
survey.yves-rocher.fr
www.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
www.yves-rocher.fr
news.yves-rocher.de
t-www.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
search.yves-rocher.de
t-www.yves-rocher.at
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.at
versand.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
news.yves-rocher.de
secureorder.m.yvesrocher.com.tr
secureorder.m.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.de
nocdn-w.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
search.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
news.yves-rocher.de
news.yves-rocher.de
www.yves-rocher.fr
versand.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
secureorder.yves-rocher.de
survey.yves-rocher.fr
news.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
prod.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
www.yves-rocher.fr
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
certforssl247apiA.yves-rocher.de
secureorder.m.yvesrocher.com.tr
versand.yves-rocher.de
secureorder.yves-rocher.de
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr

Certificate

The complete raw certificate details for www.yves-rocher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+upC1m3PjV5W1noOb9I
EJkGoRlueUs37K7YMuUPWFeNwTHlPO5Uwlyc4wEyV7vhKuf548frE2RzroRLcxCx
/RxeTTIsU6ixGfNpM0ddEPrcCnuYIG0oM5PcH1B+3LxHxu8WoK/n70UcjhqduXI8
/5VSqTcwIrEQS/7Sa48l353H12ZcyH9IOKLLJjjnpMv+k2Fr75BCtIvP7+/dTRyU
b3C99GpgHLIUoV8ppcQ80H45WYg/hoDSQGTYfrDUmofKZaYkHWmre7OUpjWrnHRj
hfDkIa0YGA7kP69ld8IS6HGaPEPK8sPBLiDHbZjo2/KEMOw0Ppkb20H1GDJSHqhc
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23848441565998992073168294689939747923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 07:38:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-11 08:08:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yves-rocher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23217818248385499042152980484262692693054115423029938544671173706874638568866332703975274978004008244411856681731360049994737535777881153358988656808858900155816303327480490000188259929641518729454857523897535041988648162671056440074147545700491320519760759649291959285589863561310769880833675885442293516298068934969906517906331655348944205289960898514207586305372093858940326353408219543284530285851396263630721038713951595139209849931856953345786226274188209293970338733992735313308276467876991870389182059143866402800135244106535310434964681903798112863358556734279066152910295254340770035124739683188929754324047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (777 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c6b1f4b5000000403004730450221009fe46fe241b30b0cfc9427cafea3a8ebed0db78467e7ab9067fa30475b6f386d0220711269e05a7e2373d2fd04768b46520060b77fc38287e182ed2179276f32a2d50077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016c6b1f4b6c00000403004830460221008268818e38422dcb3f43565231f2aea378b083e6c41d781007b903d53dcc8917022100d12b87de9ad3247ec54f17b38a7356e9c30ffbf65265f813ee0bae63baa9d9fc007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016c6b1f4b510000040300483046022100ce92b48c03771f996483c4f57b9dc51b8e81326dd6d4e5a142e467f626be4b3b022100a6a25c6cd1fc14deca3128bf848d9af6a858639b44cbe13e04f25abfd965bad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e707fda96d9c9800095444944604d708e62e22e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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