b-h-m.spc.us00.p.con-veh.net

- Volkswagen Group of America -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 97:19:95:cb:de:67:81:3e:00:00:00:00:50:f0:0c:90 was issued on by Entrust, Inc..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Group of America

Organization: Volkswagen Group of America
State / Province: Michigan
Locality: Auburn Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 97:19:95:cb:de:67:81:3e:00:00:00:00:50:f0:0c:90
Serial Number (int): 200846273016164403862475162957904874640
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 09:a6:40:52:55:32:dc:e7:0b:5f:95:a3:e8:41:78:bc:09:01:75:1b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 03:11:31:41:5c:09:32:f7:06:c8:7a:aa:07:14:e2:d9:50:00:91:1a
Fingerprint (sha256): ae:d3:cc:62:e7:bb:4a:f1:8e:14:10:73:d4:d3:e6:47:57:65:20:58:be:9a:fe:66:04:81:9c:a9:35:20:f5:c4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate b-h-m.spc.us00.p.con-veh.net

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b-h-m.spc.us00.p.con-veh.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b-h-m.spc.us00.p.con-veh.net
www.b-h-m.spc.us00.p.con-veh.net
b-h-m.spr.us00.p.con-veh.net
b-h-s.spc.us00.p.con-veh.net
b-h-s.spr.us00.p.con-veh.net
b-h-s.dp.us00.p.con-veh.net
w-h-s.spr.us00.p.con-veh.net
w-h-s.app.us00.p.con-veh.net
w-h-s.auth.us00.p.con-veh.net
w-h-s.cdn.us00.p.con-veh.net
i-h-s.dp.us00.p.con-veh.net
i-h-s.spr.us00.p.con-veh.net
i-h-s.spc.us00.p.con-veh.net
i-h-s.app.us00.p.con-veh.net
i-h-s.auth.us00.p.con-veh.net
m-h-s.mon.us00.p.con-veh.net
o-h-s.mgmt.us00.p.con-veh.net

Other certificates including the domain name con-veh.net

(limited to 100 certificates)
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-qa01.con-veh.net
carnet-CUBICclient.con-veh.net
ecert-prod01-ca.con-veh.net
carnet-verizonclient.con-veh.net
b-h-m.spc.us00.p.con-veh.net
carnet-verizonclient-qa.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-dev01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-qa01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.int.con-veh.net
carnet-boschclient.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
carnet-boschclient-qa.con-veh.net
ecert-dev01.con-veh.net
carnet-CUBICclient-qa.con-veh.net
b-h-m.spc.us00.int.con-veh.net

Certificate

The complete raw certificate details for b-h-m.spc.us00.p.con-veh.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIyjCCB7KgAwIBAgIRAJcZlcveZ4E+AAAAAFDwDJAwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwNDA5MTU0NjQwWhcNMjAwNDA5MTYxNjQwWjCBhDELMAkGA1UEBhMCVVMxETAP
BgNVBAgTCE1pY2hpZ2FuMRUwEwYDVQQHEwxBdWJ1cm4gSGlsbHMxJDAiBgNVBAoT
G1ZvbGtzd2FnZW4gR3JvdXAgb2YgQW1lcmljYTElMCMGA1UEAxMcYi1oLW0uc3Bj
LnVzMDAucC5jb24tdmVoLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALRQ6w45txSqPmY8aw2kYx49T/Sfto6x6taRJCG6tlVHCFkqPzofheS2IQ7c
Fu6uspMKrPXV/JYBzA66xkFeKAfag8JjGf58Qs8asOQ1x0KtrlLp4mQBzNFB3sAe
KLZnho+tf47rz3nPk18AtMbFnNazNR1UCxki6ksj1cIR1mgue4FDvlFZZvI5LFwP
kKHC5vliZtaR6tT1ivOqJCEtcj3GpV6ZvMvup67B1x1R8+9QpEEuAIfwbPAmq1Ab
rLiBVRTwkBrZKY9Jq0S8A59QLxgljX8UcEx5pb5JjWvhtyT7TjjBHrQ6B396v+o7
vJDJ2Cn41MSr93fEfuoMrgzqB/cCAwEAAaOCBP0wggT5MIICEAYDVR0RBIICBzCC
AgOCHGItaC1tLnNwYy51czAwLnAuY29uLXZlaC5uZXSCIHd3dy5iLWgtbS5zcGMu
dXMwMC5wLmNvbi12ZWgubmV0ghxiLWgtbS5zcHIudXMwMC5wLmNvbi12ZWgubmV0
ghxiLWgtcy5zcGMudXMwMC5wLmNvbi12ZWgubmV0ghxiLWgtcy5zcHIudXMwMC5w
LmNvbi12ZWgubmV0ghtiLWgtcy5kcC51czAwLnAuY29uLXZlaC5uZXSCHHctaC1z
LnNwci51czAwLnAuY29uLXZlaC5uZXSCHHctaC1zLmFwcC51czAwLnAuY29uLXZl
aC5uZXSCHXctaC1zLmF1dGgudXMwMC5wLmNvbi12ZWgubmV0ghx3LWgtcy5jZG4u
dXMwMC5wLmNvbi12ZWgubmV0ghtpLWgtcy5kcC51czAwLnAuY29uLXZlaC5uZXSC
HGktaC1zLnNwci51czAwLnAuY29uLXZlaC5uZXSCHGktaC1zLnNwYy51czAwLnAu
Y29uLXZlaC5uZXSCHGktaC1zLmFwcC51czAwLnAuY29uLXZlaC5uZXSCHWktaC1z
LmF1dGgudXMwMC5wLmNvbi12ZWgubmV0ghxtLWgtcy5tb24udXMwMC5wLmNvbi12
ZWgubmV0gh1vLWgtcy5tZ210LnVzMDAucC5jb24tdmVoLm5ldDCCAXsGCisGAQQB
1nkCBAIEggFrBIIBZwFlAHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g
gw8AAAFqAuMi6QAABAMARjBEAiA/SCBQ46CNAr2xVnAh/VMCsJ3CY6yNotCfa1p0
jWNtPQIgLNFRdxM9g7prn/oxjz9l4jBnQXNeU6jmf+5pusrStT8AdQBVgdTCFpA2
AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWoC4yMIAAAEAwBGMEQCIGjgyvy5
F+uFuzeQzLrzGSVnwUUMhv8QbcbfhPjpfC8+AiBDL0XhqcyCyrVrPNC1/Ocw1jBr
03EeYd5FXbObY5BoVgB1ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGF
AAABagLjIxoAAAQDAEYwRAIgcAWRZxiXA/QKYVryR5tttB4P69svebE4R8Mq2Lv3
+dkCIArebviQO/H76NHCRX/hR/x/oQw68ZXOHcBK46C4CQkqMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAo
oCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAE
RDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRy
dXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcw
AYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9h
aWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB0
3bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUCaZAUlUy3OcLX5Wj6EF4vAkBdRsw
CQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAXhZjygEQRhtMGfRj6rtUGUH9
9ETBKliKXPJG5vW9k55Sygpf306Hu7ZUY5P63aWU1runmZKpOW0tYVWfUT1b9PBN
fhu61pOB2h5Q1VSio0mzvZM+lmC8TweEyik4M5HDARgkXA3cMdkbMdSvgywy262/
jWw8QDHiyHPLmI+Ie0zZ3BC6I8o2O4Ah1y21R2ymVEAsEMRr53z2JuqMQCKJNSkz
InCLZXyqPOfVPyS2/YXxLUCrjTJIOUgLMjQx7Fj0Fk1JVwfl+zMSK82ZSsBTamOC
zMUJhGGr1bAiPjJI4dnER+uFIeqW+HEWXeO3/DzCknjEZXD+k3qrTeykgc/mBQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFDrDjm3FKo+ZjxrDaRj
Hj1P9J+2jrHq1pEkIbq2VUcIWSo/Oh+F5LYhDtwW7q6ykwqs9dX8lgHMDrrGQV4o
B9qDwmMZ/nxCzxqw5DXHQq2uUuniZAHM0UHewB4otmeGj61/juvPec+TXwC0xsWc
1rM1HVQLGSLqSyPVwhHWaC57gUO+UVlm8jksXA+QocLm+WJm1pHq1PWK86okIS1y
PcalXpm8y+6nrsHXHVHz71CkQS4Ah/Bs8CarUBusuIFVFPCQGtkpj0mrRLwDn1Av
GCWNfxRwTHmlvkmNa+G3JPtOOMEetDoHf3q/6ju8kMnYKfjUxKv3d8R+6gyuDOoH
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200846273016164403862475162957904874640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 15:46:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 16:16:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b-h-m.spc.us00.p.con-veh.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22762797138492033130918923978292081489736899848036551881432929104696818980099804388643537297801241587971996003253695584554034017873045862925922324452610514242258916701305554394431567833976094579511779975169188203598103965395976306842952030253741740062640104755666169602052639851669733979229626742325953402629739900634798729962381981308912764107750577608688504389708231712278394142936227414024373137015886536613971100973953258822926017779169445873464468212669748402541583764383404295052820837390719807741523840510707086879880905220225247182200790262243141467065950925502048989510661683269383022662765272892699899987959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (519 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b-h-m.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.dp.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.app.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.auth.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.cdn.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.dp.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.app.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.auth.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-h-s.mon.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-h-s.mgmt.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09a640525532dce70b5f95a3e84178bc0901751b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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