ukx2-lyn-fepool01.uk.experian.local

Issued by Experian Issuing CA 1

About this certificate

This digital certificate with serial number 4e:18:1a:8c was issued on byExperian Issuing CA 1.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ukx2-lyn-fepool01.uk.experian.local,OU=Accounts+OU=SSL Accounts,0.9.2342.19200300.100.1.25=#13027573,0.9.2342.19200300.100.1.25=#1308657870657269616e,0.9.2342.19200300.100.1.25=#13056c6f63616c

Experian Issuing CA 1

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:18:1a:8c
Serial Number (int): 1310202508
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 32:95:83:aa:a9:9f:17:a8:1d:bb:6c:16:43:5f:2c:fa:fa:d6:10:d3
AuthorityKeyId: 0c:e8:31:d4:e3:1f:e3:d8:ef:5d:a1:3d:c3:28:bf:83:c3:75:fa:76

Fingerprint (sha1): 4c:5c:00:61:16:5a:67:a6:e3:f5:12:01:34:fb:a6:80:a6:ef:72:d7
Fingerprint (sha256): a4:87:de:aa:a2:71:20:64:2e:7c:b1:0c:e1:c3:82:4d:00:e6:42:71:fb:e0:de:52:33:8c:6c:bb:4f:c8:bd:97

Issuing Certificate URL: http://experian.managed.entrust.com/AIA/CertsIssuedToExperianIssuingCA1.p7c

Revocation information

CRL Distribution Point: http://experian.managed.entrust.com/CRLs/ExperianIssuingCA1.crl

Check the revocation status for certificate ukx2-lyn-fepool01.uk.experian.local

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukx2-lyn-fepool01.uk.experian.local

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ukx2-lyn-fepool01.uk.experian.local
sip.experian.com
sip.uk.experian.com
sip.experian.ie
sip.au.experian.com
sip.jp.experian.com
sip.my.experian.com
sip.sg.experian.com
sip.cn.experian.com
sip.hk.experian.com
sip.in.experian.com
sip.exchange.experian.com
lync.experian.com
ukx2-lyn-fe01.uk.experian.local
ukx2-lyn-fe02.uk.experian.local
ukx2-lyn-fe03.uk.experian.local
ukx2-lyn-intweb01.uk.experian.local
ukx2-lyn-wac01.uk.experian.local
lyncdiscoverinternal.experian.com
lyncdiscoverinternal.uk.experian.com
lyncdiscoverinternal.experian.ie
lyncdiscoverinternal.hitwise.com
lyncdiscoverinternal.au.experian.com
lyncdiscoverinternal.jp.experian.com
lyncdiscoverinternal.ap.experian.com
lyncdiscoverinternal.my.experian.com
lyncdiscoverinternal.sg.experian.com
lyncdiscoverinternal.cn.experian.com
lyncdiscoverinternal.hk.experian.com
lyncdiscoverinternal.in.experian.com
lyncdiscoverinternal.exchange.experian.com

Other certificates including the domain name experian.local

(limited to 100 certificates)

Certificate

The complete raw certificate details for ukx2-lyn-fepool01.uk.experian.local in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ/TCCCOWgAwIBAgIEThgajDANBgkqhkiG9w0BAQUFADCBqDEVMBMGCgmSJomT
8ixkARkWBWxvY2FsMRgwFgYKCZImiZPyLGQBGRYIZXhwZXJpYW4xFjAUBgNVBAMT
DUNvbmZpZ3VyYXRpb24xETAPBgNVBAMTCFNlcnZpY2VzMRwwGgYDVQQDExNQdWJs
aWMgS2V5IFNlcnZpY2VzMQwwCgYDVQQDEwNBSUExHjAcBgNVBAMTFUV4cGVyaWFu
IElzc3VpbmcgQ0EgMTAeFw0xMzEwMTQyMDA1MDNaFw0xNjEwMTQyMDM1MDNaMIGd
MRUwEwYKCZImiZPyLGQBGRYFbG9jYWwxGDAWBgoJkiaJk/IsZAEZFghleHBlcmlh
bjESMBAGCgmSJomT8ixkARkWAnVzMREwDwYDVQQLEwhBY2NvdW50czEVMBMGA1UE
CxMMU1NMIEFjY291bnRzMSwwKgYDVQQDEyN1a3gyLWx5bi1mZXBvb2wwMS51ay5l
eHBlcmlhbi5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMKk
8h0Rh76HmnSCXBRxZVmfLFtB16KJuPqVRnpuU1cpf/nKAb0Gfs5d30hlmLL432qg
ISCfR2nWTKbyrkGLLhfQ3vLz0ozlbhjMwHbnp0OeGujKyRtN6q+13Me4IpUhYrr9
q0JANBD4madcBwqyPJBTkgoTCSgejhgUTVFfOYOKI4VQK8rY2X5SfulWaVDWgkuF
oeMjo41HBQuCiRWEYyGTh5AcOOTti1hz2CHOwk5F8vy2SfbDqZvNFnwsl5L4e4Ys
XyXvMD7pqfCHBnZHkzurPQeKC9zavnglMugSKnSV7ff+n1ncmf83rkzooWuPiZxS
EUnY1IdSKFv1n/2LJoECAwEAAaOCBjYwggYyMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktodHRwOi8vZXhwZXJpYW4ubWFuYWdlZC5lbnRydXN0LmNvbS9BSUEv
Q2VydHNJc3N1ZWRUb0V4cGVyaWFuSXNzdWluZ0NBMS5wN2MwXAYDVR0gBFUwUzBR
BgorBgEEAZgdBwEBMEMwQQYIKwYBBQUHAgEWNWh0dHA6Ly9leHBlcmlhbi5tYW5h
Z2VkLmVudHJ1c3QuY29tL0NQL0V4cGVyaWFuQ1AucGRmMIIDvgYDVR0RBIIDtTCC
A7GCI3VreDItbHluLWZlcG9vbDAxLnVrLmV4cGVyaWFuLmxvY2FsghBzaXAuZXhw
ZXJpYW4uY29tghNzaXAudWsuZXhwZXJpYW4uY29tgg9zaXAuZXhwZXJpYW4uaWWC
E3NpcC5hdS5leHBlcmlhbi5jb22CE3NpcC5qcC5leHBlcmlhbi5jb22CE3NpcC5t
eS5leHBlcmlhbi5jb22CE3NpcC5zZy5leHBlcmlhbi5jb22CE3NpcC5jbi5leHBl
cmlhbi5jb22CE3NpcC5oay5leHBlcmlhbi5jb22CE3NpcC5pbi5leHBlcmlhbi5j
b22CGXNpcC5leGNoYW5nZS5leHBlcmlhbi5jb22CEWx5bmMuZXhwZXJpYW4uY29t
gh91a3gyLWx5bi1mZTAxLnVrLmV4cGVyaWFuLmxvY2Fsgh91a3gyLWx5bi1mZTAy
LnVrLmV4cGVyaWFuLmxvY2Fsgh91a3gyLWx5bi1mZTAzLnVrLmV4cGVyaWFuLmxv
Y2FsgiN1a3gyLWx5bi1pbnR3ZWIwMS51ay5leHBlcmlhbi5sb2NhbIIgdWt4Mi1s
eW4td2FjMDEudWsuZXhwZXJpYW4ubG9jYWyCIWx5bmNkaXNjb3ZlcmludGVybmFs
LmV4cGVyaWFuLmNvbYIkbHluY2Rpc2NvdmVyaW50ZXJuYWwudWsuZXhwZXJpYW4u
Y29tgiBseW5jZGlzY292ZXJpbnRlcm5hbC5leHBlcmlhbi5pZYIgbHluY2Rpc2Nv
dmVyaW50ZXJuYWwuaGl0d2lzZS5jb22CJGx5bmNkaXNjb3ZlcmludGVybmFsLmF1
LmV4cGVyaWFuLmNvbYIkbHluY2Rpc2NvdmVyaW50ZXJuYWwuanAuZXhwZXJpYW4u
Y29tgiRseW5jZGlzY292ZXJpbnRlcm5hbC5hcC5leHBlcmlhbi5jb22CJGx5bmNk
aXNjb3ZlcmludGVybmFsLm15LmV4cGVyaWFuLmNvbYIkbHluY2Rpc2NvdmVyaW50
ZXJuYWwuc2cuZXhwZXJpYW4uY29tgiRseW5jZGlzY292ZXJpbnRlcm5hbC5jbi5l
eHBlcmlhbi5jb22CJGx5bmNkaXNjb3ZlcmludGVybmFsLmhrLmV4cGVyaWFuLmNv
bYIkbHluY2Rpc2NvdmVyaW50ZXJuYWwuaW4uZXhwZXJpYW4uY29tgipseW5jZGlz
Y292ZXJpbnRlcm5hbC5leGNoYW5nZS5leHBlcmlhbi5jb20wggEbBgNVHR8EggES
MIIBDjBFoEOgQYY/aHR0cDovL2V4cGVyaWFuLm1hbmFnZWQuZW50cnVzdC5jb20v
Q1JMcy9FeHBlcmlhbklzc3VpbmdDQTEuY3JsMIHEoIHBoIG+pIG7MIG4MRUwEwYK
CZImiZPyLGQBGRYFbG9jYWwxGDAWBgoJkiaJk/IsZAEZFghleHBlcmlhbjEWMBQG
A1UEAxMNQ29uZmlndXJhdGlvbjERMA8GA1UEAxMIU2VydmljZXMxHDAaBgNVBAMT
E1B1YmxpYyBLZXkgU2VydmljZXMxDDAKBgNVBAMTA0FJQTEeMBwGA1UEAxMVRXhw
ZXJpYW4gSXNzdWluZyBDQSAxMQ4wDAYDVQQDEwVDUkwyNjAfBgNVHSMEGDAWgBQM
6DHU4x/j2O9doT3DKL+Dw3X6djAdBgNVHQ4EFgQUMpWDqqmfF6gdu2wWQ18s+vrW
ENMwGQYJKoZIhvZ9B0EABAwwChsEVjguMQMCA6gwDQYJKoZIhvcNAQEFBQADggEB
AJ1ian9dnPqc70D968sVQ8+NmlARdHgqKYYOC1qUDYDnmasm0uAY84MIK26q9hj4
C66Njusxq3NK2F7metXs7k0miVpM5ccBNte4DK2bfrDudutaLZ3UNazS9T5mnwiB
0/3uMG/xfG5WNBA8CTwbRaTnjl3SgI8xPNoW8h1j4VP46LJamgXfarJM0KWS1TnM
yMtAkIuIocmFKw8LBLT1xB8AcL3/tYu/ygbpC8WpSnRhGmMJ1dAeOJlJqnsFoNOa
cFwGoKdVq3c6i6UPPM7FKbGyRDovZiQbxZ5JuYcJEow6ci9yUxtNDJMAQTkhxZul
1H3Zv92Z1nTYHXqoNSGBY7g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqTyHRGHvoeadIJcFHFl
WZ8sW0HXoom4+pVGem5TVyl/+coBvQZ+zl3fSGWYsvjfaqAhIJ9HadZMpvKuQYsu
F9De8vPSjOVuGMzAduenQ54a6MrJG03qr7Xcx7gilSFiuv2rQkA0EPiZp1wHCrI8
kFOSChMJKB6OGBRNUV85g4ojhVArytjZflJ+6VZpUNaCS4Wh4yOjjUcFC4KJFYRj
IZOHkBw45O2LWHPYIc7CTkXy/LZJ9sOpm80WfCyXkvh7hixfJe8wPump8IcGdkeT
O6s9B4oL3Nq+eCUy6BIqdJXt9/6fWdyZ/zeuTOiha4+JnFIRSdjUh1IoW/Wf/Ysm
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1310202508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'local'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'experian'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Configuration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Public Key Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian Issuing CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-14 20:05:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-14 20:35:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'local'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'experian'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'us'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Accounts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL Accounts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukx2-lyn-fepool01.uk.experian.local'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24571568947224230611861093761112943555438026184867685857099253469926035234620561236478870191219532078882489005974091326441422706268698982632710400131130047439451413390484221634815566309773307039537140732335294595480504913950793142017598663090250470523836866016906564778175448160456854802233052691788924447643995429841229866421505870574583887077103082704116252364400960486091235356356263626304033148536329746185676112208657598704391124898406133004071707819531428024512595983548373154145706358521809340607272010887140164480200572131592808947898014123428957570602612452727718078884341022319171866707459211527833759983233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://experian.managed.entrust.com/AIA/CertsIssuedToExperianIssuingCA1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.3101.7.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://experian.managed.entrust.com/CP/ExperianCP.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (949 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukx2-lyn-fepool01.uk.experian.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.experian.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.au.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.jp.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.my.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sg.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cn.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.in.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.exchange.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukx2-lyn-fe01.uk.experian.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukx2-lyn-fe02.uk.experian.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukx2-lyn-fe03.uk.experian.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukx2-lyn-intweb01.uk.experian.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukx2-lyn-wac01.uk.experian.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.experian.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.hitwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.au.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.jp.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.ap.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.my.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.sg.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.cn.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.hk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.in.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.exchange.experian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://experian.managed.entrust.com/CRLs/ExperianIssuingCA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'experian'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Configuration'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Public Key Services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian Issuing CA 1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CRL26'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0ce831d4e31fe3d8ef5da13dc328bf83c375fa76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							329583aaa99f17a81dbb6c16435f2cfafad610d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.65.0 (entrustVersInfo)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:27|false] GeneralString 'V8.1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
								03a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009d626a7f5d9cfa9cef40fdebcb1543cf8d9a501174782a29860e0b5a940d80e799ab26d2e018f383082b6eaaf618f80bae8d8eeb31ab734ad85ee67ad5ecee4d26895a4ce5c70136d7b80cad9b7eb0ee76eb5a2d9dd435acd2f53e669f0881d3fdee306ff17c6e5634103c093c1b45a4e78e5dd2808f313cda16f21d63e153f8e8b25a9a05df6ab24cd0a592d539ccc8cb40908b88a1c9852b0f0b04b4f5c41f0070bdffb58bbfca06e90bc5a94a74611a6309d5d01e389949aa7b05a0d39a705c06a0a755ab773a8ba50f3ccec529b1b2443a2f66241bc59e49b98709128c3a722f72531b4d0c9300413921c59ba5d47dd9bfdd99d674d81d7aa835218163b8