netaccessa.smshealthconx.net

- Cerner Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a2:7a:57:4d:a5:92:fa:53:00:00:00:00:50:e2:e4:1b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cerner Corporation

Organization: Cerner Corporation
Organization unit: Cerner Technology Services
State / Province: Missouri
Locality: Kansas CIty
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a2:7a:57:4d:a5:92:fa:53:00:00:00:00:50:e2:e4:1b
Serial Number (int): 215970166255344363587664490160975963163
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: de:8e:40:8e:d1:b0:f1:bc:3d:f3:e8:12:39:ae:12:98:00:45:fd:99
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b7:78:6e:36:b2:de:e6:b1:6c:ea:a7:3f:ca:f9:64:16:45:39:b3:fb
Fingerprint (sha256): a9:fd:66:9c:a4:6b:2a:99:39:d7:a2:6f:8c:a4:4e:56:e0:c9:87:64:12:3a:4f:be:b5:ac:57:5c:7f:8a:23:97

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate netaccessa.smshealthconx.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netaccessa.smshealthconx.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netaccessa.smshealthconx.net

Other certificates including the domain name smshealthconx.net

(limited to 100 certificates)
netaccessa.smshealthconx.net
netaccess2.smshealthconx.net
documentmanagement.smshealthconx.net
netaccess.smshealthconx.net
netaccess3.smshealthconx.net
www.smshealthconx.net
netaccessb.smshealthconx.net
oasgold07.smshealthconx.net
oasgold04.smshealthconx.net
netaccess3.smshealthconx.net
oasgold03.smshealthconx.net
netaccessc.smshealthconx.net
netaccess2.smshealthconx.net
www.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess.smshealthconx.net
oasgold07.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess2.smshealthconx.net
nsp.smshealthconx.net
www.smshealthconx.net
netaccess3.smshealthconx.net
dashboard.smshealthconx.net
oasgold01.smshealthconx.net
www.smshealthconx.net
netaccess2.smshealthconx.net
netaccessc.smshealthconx.net
OASGOLD04.smshealthconx.net
netaccess2.smshealthconx.net
check.smshealthconx.net
www.smshealthconx.net
OASGOLD07.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess3.smshealthconx.net
OASGOLD02.smshealthconx.net
netaccess.smshealthconx.net
netaccess.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess.smshealthconx.net
netaccessa.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess.smshealthconx.net
check.smshealthconx.net
netaccess2.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccessc.smshealthconx.net
check.smshealthconx.net
netaccess.smshealthconx.net
oasgold01.smshealthconx.net
netaccess-lifespan.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
netaccessb.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess2.smshealthconx.net
netaccessa.smshealthconx.net
oasgold02.smshealthconx.net
dashboard.smshealthconx.net
netaccess2.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccessb.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
netaccessc.smshealthconx.net
netaccessc.smshealthconx.net
netaccess2.smshealthconx.net
netaccessa.smshealthconx.net
netaccessb.smshealthconx.net
netaccess3.smshealthconx.net
netaccess.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess3.smshealthconx.net
OASGOLD07.smshealthconx.net
netaccess.smshealthconx.net
netaccessb.smshealthconx.net
netaccessa.smshealthconx.net
netaccess2.smshealthconx.net
documentmanagement.smshealthconx.net
OASGOLD01.smshealthconx.net
netaccess3.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
dashboard-internet.smshealthconx.net
oasgold03.smshealthconx.net
netaccessa.smshealthconx.net
netaccessc.smshealthconx.net
www.smshealthconx.net
oasgold05.smshealthconx.net
oasgold03.smshealthconx.net
netaccess.smshealthconx.net
www.smshealthconx.net
netaccessb.smshealthconx.net
oasgold05.smshealthconx.net
netaccessb.smshealthconx.net

Certificate

The complete raw certificate details for netaccessa.smshealthconx.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIRAKJ6V02lkvpTAAAAAFDi5BswDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTgwNTE4MTMwNTEyWhcNMjAwNTE4MTMzNTExWjCBnzELMAkGA1UEBhMCVVMxETAP
BgNVBAgTCE1pc3NvdXJpMRQwEgYDVQQHEwtLYW5zYXMgQ0l0eTEbMBkGA1UEChMS
Q2VybmVyIENvcnBvcmF0aW9uMSMwIQYDVQQLExpDZXJuZXIgVGVjaG5vbG9neSBT
ZXJ2aWNlczElMCMGA1UEAxMcbmV0YWNjZXNzYS5zbXNoZWFsdGhjb254Lm5ldDCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANGOKoqFUUicvxbNOs3snYvv
f2Igc/I2EcblAinpy+WXiUYxjtObzyE5XjYdDFtfYz2SFvR+xXmuOQyCQhSyD9wo
3eFR/PdcWYUCvN6JIKxNmdPothQw7Je53maLL4VgoC3Rj+I43yyPi/yXXGGaHWwn
x/jmrFRKTk+vsNTbJcvJkytcvLPWAQa7c2FJgUhiMq0l8D4GcPAOUxXA5fsyHGlW
JmduDP2m/0JLBhOnXdy8I76QRNjKfN208jng76yKsFji1NJn4d1mTzxdP+CFo1O/
CYWZ4re4BbnePUTFXm+lS23rBZ4cCSlFfh+c6VtXPwFx7vWbgdIplpjtX4+tz78C
AwEAAaOCAagwggGkMBMGCisGAQQB1nkCBAMBAf8EAgUAMCcGA1UdEQQgMB6CHG5l
dGFjY2Vzc2Euc21zaGVhbHRoY29ueC5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZI
AYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3Jw
YTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8v
b2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0
Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/
p2DGCky/MB0GA1UdDgQWBBTejkCO0bDxvD3z6BI5rhKYAEX9mTAJBgNVHRMEAjAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBMXzZTaNfc4dB5b/teJDLgrxh7Q72iEVjvzWbg
6VhqUyCF5qxPT096EHDP7FC1zEtLm8AfVzFuUZsnftqsU/IVN+0XSMBe7K6Axlc1
iIr6+ySivuf90E9GqaSEIUcvQiwQXvixsg3R/pGeG2l1KLgvcJuV546iYQVxB0gF
EhFR8r9XLvMKerfvoRkg416oM+uTAWzXHr84MwQgOIlmdidELT5/G4d4j01CWVCZ
ac7U7vhkSVTTmAnI7T5lnzaiIzxYredpuxTxP0pQP/NM2mcwH9fFSU8Ot1IAoRIt
LpYV2K7nL4Zlj00Db0ajYc8jwvdZxuf8Jto0UouqRI2h92SW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y4qioVRSJy/Fs06zeyd
i+9/YiBz8jYRxuUCKenL5ZeJRjGO05vPITleNh0MW19jPZIW9H7Fea45DIJCFLIP
3Cjd4VH891xZhQK83okgrE2Z0+i2FDDsl7neZosvhWCgLdGP4jjfLI+L/JdcYZod
bCfH+OasVEpOT6+w1Nsly8mTK1y8s9YBBrtzYUmBSGIyrSXwPgZw8A5TFcDl+zIc
aVYmZ24M/ab/QksGE6dd3LwjvpBE2Mp83bTyOeDvrIqwWOLU0mfh3WZPPF0/4IWj
U78JhZnit7gFud49RMVeb6VLbesFnhwJKUV+H5zpW1c/AXHu9ZuB0imWmO1fj63P
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 215970166255344363587664490160975963163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 13:05:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 13:35:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kansas CIty'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cerner Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cerner Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netaccessa.smshealthconx.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26453910492210344854291445446739630245670751850091405512361595225193383284707922078900897067999781067516643591890913754983238243668633136146655269093677677604259865957211974407200108885940167833417648782517898266966191807538026292068161407967010564678377666966171313184090521094707866791308922903176358080702605039885576827484800496693182672500170330547759805165162554378753612457470541588830352894187772310611244898974093233742952125153390606211323747343456254372367795573329853544757790644597087058358234882673906586152375687299078487036046236188823050443595255276106073384056482383796850515287823782698629286711231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netaccessa.smshealthconx.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de8e408ed1b0f1bc3df3e81239ae12980045fd99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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