www.smartdata.lloydsbankcommercial.com

- MasterCard International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3f:33:e9:52:0f:a4:26:7f:00:00:00:00:50:e6:42:6b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MasterCard International

Organization: MasterCard International
Organization unit: BIP01 AIDC
Locality: Waterloo
Country: BE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:33:e9:52:0f:a4:26:7f:00:00:00:00:50:e6:42:6b
Serial Number (int): 84010903177222673985279184115117474411
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: fb:23:3d:84:fc:f7:87:9f:3a:39:48:15:3d:19:f7:b2:8a:e5:99:76
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a6:b3:40:87:a0:af:c6:54:ff:de:b3:57:1e:f3:e9:0d:7a:0c:a3:31
Fingerprint (sha256): a3:5e:fa:ae:87:e5:e3:8f:b6:08:9f:77:9e:30:9f:e4:b3:18:56:d3:d7:07:f6:9d:74:d1:7c:a2:94:85:9a:ee

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.smartdata.lloydsbankcommercial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.smartdata.lloydsbankcommercial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.smartdata.lloydsbankcommercial.com

Other certificates including the domain name lloydsbankcommercial.com

(limited to 100 certificates)
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
lloydsbankcommercial.com
amconline.co.uk
volunteering.lloydsbankinggroup.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
www.lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.epayvirtual.lloydsbankcommercial.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
www.prepaid.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
international.lloydsbank.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
amconline.co.uk
sdg2demo.commerzbank.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
amconline.co.uk
amconline.co.uk
www.amconline.co.uk
sdg2.comdata.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
customerservice.lloydsbankcommercial.com
sdg2.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.lloydsbankcommercial.com
amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
www.test-smartdata.lloydsbankcommercial.com
www.lloydsbankcommercial.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
sdg2.comdata.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
customerservice.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
mcincontrol.mastercard.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.test-smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
dcsrd-prod-01.lloydsbanking.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
blog.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
touchpoint.lloydsbankcommercial.com
international.lloydsbank.com
international.lloydsbank.com
lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
www.amconline.co.uk
international.lloydsbank.com

Certificate

The complete raw certificate details for www.smartdata.lloydsbankcommercial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIQPzPpUg+kJn8AAAAAUOZCazANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA4MTYxMjU5MTZaFw0yMDExMTUxMzI5MTVaMIGJMQswCQYDVQQGEwJCRTERMA8G
A1UEBxMIV2F0ZXJsb28xITAfBgNVBAoTGE1hc3RlckNhcmQgSW50ZXJuYXRpb25h
bDETMBEGA1UECxMKQklQMDEgQUlEQzEvMC0GA1UEAxMmd3d3LnNtYXJ0ZGF0YS5s
bG95ZHNiYW5rY29tbWVyY2lhbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDkWpFvb2X2pWPpWP42Gopk7RHSWQW9mfclckEGx9dlBwpQ2WNylFAm
fbHevJ3BtS9jgi5TUPmHmEkZCOfUfJ1G33ptrUeC6iP9a+Ou+iFXzR+ak8kYfOWH
sgXpCjA+5N5RpYt6kEP6B9YST35g8EfrF8eCT7oDlug09TheBim/iYYKPXRL35yM
KyDS4aCY7+KwdTk3t+2J7OcLZ302hkX5fPYhOeUE9K3jxk2OZmYXFcxFQeFppPR2
kTfPE9fvkDKFG3vTQaFPj4SiIJkHe9FSbO+2ehYtk5VLaVyECI2PF19bJagjPGfM
iKRAjvBcqjZ/WBDociZSCUkyX9upUkz/AgMBAAGjggGoMIIBpDATBgorBgEEAdZ5
AgQDAQH/BAIFADAxBgNVHREEKjAogiZ3d3cuc21hcnRkYXRhLmxsb3lkc2Jhbmtj
b21tZXJjaWFsLmNvbTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH
AwEwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZl
bDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYa
aHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEB
BFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYB
BQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAf
BgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQU+yM9hPz3
h586OUgVPRn3sorlmXYwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAlE3j
Oy667xAc3YJ65B3c8/wyUaheu/4wq41HQ/pmDnSRAthcQ3PrlseH6bitqEx2QW3e
Kf0+P1afAlZNS3Vs+ys/OIppXeUnc6hktovEtVkXI5Gnh6Buo7E2/JwkOxiljs00
MF3ZOsgVTOnOOtU6lCpBKIfK9F/UtXHgE90IpHVpQ/4lMEMW1KWi4XzLDiIBI7Qz
M55RjleTpTJ2yyrTQsjJrOkDGeKiIp4BSlBZLBrzWw8vJmccxcgB1PefZHdXOx2X
ExdZd5VfScN7gYQCf9VmGY2OR4J/t1MN+rnH5J4AUqKOg9Q7zFaRGGonlWmQ8QZa
lQhwhK68QE4Vr/l8dw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FqRb29l9qVj6Vj+NhqK
ZO0R0lkFvZn3JXJBBsfXZQcKUNljcpRQJn2x3rydwbUvY4IuU1D5h5hJGQjn1Hyd
Rt96ba1Hguoj/WvjrvohV80fmpPJGHzlh7IF6QowPuTeUaWLepBD+gfWEk9+YPBH
6xfHgk+6A5boNPU4XgYpv4mGCj10S9+cjCsg0uGgmO/isHU5N7ftieznC2d9NoZF
+Xz2ITnlBPSt48ZNjmZmFxXMRUHhaaT0dpE3zxPX75AyhRt700GhT4+EoiCZB3vR
UmzvtnoWLZOVS2lchAiNjxdfWyWoIzxnzIikQI7wXKo2f1gQ6HImUglJMl/bqVJM
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84010903177222673985279184115117474411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 12:59:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 13:29:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MasterCard International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIP01 AIDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.smartdata.lloydsbankcommercial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28826994330164173080252167871472994871395865697997979519779140057336342859307980020387581836492745382752531192692888744296440628599373935279162528004887949870107396013779178345386607770124617307406812837299963354830228149544780142081171797533313975083167301717363829302008023999384231373897450426887537000569757176880808017211648955886828086432747443502829963442412893793202383626011543658168253965930550910037153960341833215964975116613272905714615311223877803248991380719788166650012796409787230453492557695172991132778409626540684844334694149254188433377901141254807722707155103152031860170710733805653985040944383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdata.lloydsbankcommercial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb233d84fcf7879f3a3948153d19f7b28ae59976
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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