webmail.cpgcorp.com.sg
- CPG Corporation Pte Ltd -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 58:1e:43:fd:c8:dc:17:42:00:00:00:00:50:e9:b6:96 was issued on by Entrust, Inc..
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CPG Corporation Pte Ltd
Organization:
CPG Corporation Pte Ltd
Locality:
Singapore
Country: SG
Country: SG
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 58:1e:43:fd:c8:dc:17:42:00:00:00:00:50:e9:b6:96Serial Number (int): 117129211563160277891685198858421909142
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: c8:87:bd:d8:cd:68:d6:91:1b:11:d0:c5:fa:08:b7:94:1f:31:4e:c2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 3b:97:22:c6:84:73:a6:ec:eb:d7:ab:19:b3:5e:a8:d2:46:fa:ec:b4
Fingerprint (sha256): bd:d7:ca:d1:a4:30:61:7f:07:8c:fd:17:6e:04:e4:a2:88:0b:0c:4e:4c:5a:3b:65:05:63:58:7a:e3:b2:fa:b7
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate webmail.cpgcorp.com.sg
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webmail.cpgcorp.com.sg
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webmail.cpgcorp.com.sg
sts.cpgcorp.com.sg
autodiscover.cpgcorp.com.sg
webmail2.cpgcorp.com.sg
cpgcorp.com.sg
smtp.cpgcorp.com.sg
corpsmg01.cpgcorp.com.sg
sts.cpgcorp.com.sg
autodiscover.cpgcorp.com.sg
webmail2.cpgcorp.com.sg
cpgcorp.com.sg
smtp.cpgcorp.com.sg
corpsmg01.cpgcorp.com.sg
Other certificates including the domain name cpgcorp.com.sg
(limited to 100 certificates)
gate3.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
truesupport.truerx.com
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
epayslip.cpgcorp.com.sg
eservices.cpgcorp.com.sg
eps.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
wup.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
eservices.cpgcorp.com.sg
gate3.cpgcorp.com.sg
gate3.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
epayslip.cpgcorp.com.sg
eps.cpgcorp.com.sg
sts.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
eservices.cpgcorp.com.sg
truesupport.truerx.com
gate.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
Access01.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate.cpgcorp.com.sg
eps.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
gate3.cpgcorp.com.sg
ess.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
lyncwebextdir01.cpgcorp.com.sg
ess.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate2.cpgcorp.com.sg
sip.cpgcorp.com.sg
support.ata-services.net
sip.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
servicedesk.austinretina.com
servicedesk.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
truesupport.truerx.com
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
epayslip.cpgcorp.com.sg
eservices.cpgcorp.com.sg
eps.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
wup.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
eservices.cpgcorp.com.sg
gate3.cpgcorp.com.sg
gate3.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
epayslip.cpgcorp.com.sg
eps.cpgcorp.com.sg
sts.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
eservices.cpgcorp.com.sg
truesupport.truerx.com
gate.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
Access01.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate.cpgcorp.com.sg
eps.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
gate3.cpgcorp.com.sg
ess.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
lyncwebextdir01.cpgcorp.com.sg
ess.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate2.cpgcorp.com.sg
sip.cpgcorp.com.sg
support.ata-services.net
sip.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
servicedesk.austinretina.com
Certificate
The complete raw certificate details for webmail.cpgcorp.com.sg in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHvzCCBqegAwIBAgIQWB5D/cjcF0IAAAAAUOm2ljANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x ODExMDUwNjA0MjRaFw0yMDExMDUwNjM0MjNaMGQxCzAJBgNVBAYTAlNHMRIwEAYD VQQHEwlTaW5nYXBvcmUxIDAeBgNVBAoTF0NQRyBDb3Jwb3JhdGlvbiBQdGUgTHRk MR8wHQYDVQQDExZ3ZWJtYWlsLmNwZ2NvcnAuY29tLnNnMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA54LQV4E0Sb3+v1YFX5mw6uhquuOT0rF+076iusFi HX0+VUk1GlGKCSk+MZQTrs7oiHLmX2q1r/upX9mBdeq3qeYP0hh099uMwW+Tx8tv SaZZQjj4pYQYwDXO4NELCd4SODjPa7o2zOMC9HAE/OzxjqBE1POs3ZJ4kLjJ2g7n NazrQOZy15Rf8JZs0/f47jOxz/nLy199ZNzjs49XABpH1WTmhl7nbhYoEesuD/wk M6nlWVLcPp7nTsE5KyG/KoSI3fgEhbI9vS3VwBLf51SIkVHmvoH+8BAmhfV/Gy9u B/xyHC+XNkatyIBCQNGHjrPVwEE7VGuvif5/8ulXWmHGUwIDAQABo4IEFDCCBBAw gawGA1UdEQSBpDCBoYIWd2VibWFpbC5jcGdjb3JwLmNvbS5zZ4ISc3RzLmNwZ2Nv cnAuY29tLnNnghthdXRvZGlzY292ZXIuY3BnY29ycC5jb20uc2eCF3dlYm1haWwy LmNwZ2NvcnAuY29tLnNngg5jcGdjb3JwLmNvbS5zZ4ITc210cC5jcGdjb3JwLmNv bS5zZ4IYY29ycHNtZzAxLmNwZ2NvcnAuY29tLnNnMIIB9wYKKwYBBAHWeQIEAgSC AecEggHjAeEAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWbi lGBRAAAEAwBHMEUCIQCqY6FlHz9P6bROZDNNAbCj9xTbq+QdcmchsAZVl9hrSwIg doKAOjt+JcoB+CakcXZMrJ9lmoyr66AOnx5tpwSCJlQAdgCkuQmQtBhYFIe7E6LM Z3AKPDWYBPkb37jjd80OyA3cEAAAAWbilGBaAAAEAwBHMEUCIF/9LDziB8TpiiyU OC+rt/IBPkvwLTC27k2txpc0LShyAiEAnDd5KSsLTgZC2rvvHq9k8/n3KWvHJDF0 aFga/p7txIEAdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWbi lGB6AAAEAwBIMEYCIQDlDenH6emvd056UJ8MFX8Uwvu6u1TkimgkbrtfLYHSNAIh AP+6UHnmUqqY2tBeHKgm9W36A6/neGvjzBCWsTu91bwAAHYAu9nfvB+KcbWTlCOX qpJ7RzhXlQqrUugakJZkNo4e0YUAAAFm4pRgXAAABAMARzBFAiEAqiN9G26wU231 RU9y9W3gjqjQU7+kQ4lc34HAvL3Ml+UCIG1PsCDU5j8UxB544hoZgs4MaQmDV+Z/ OCEubyuDfF/eMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5l dC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEF BQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsG AQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQw MwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2 LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQU yIe92M1o1pEbEdDF+gi3lB8xTsIwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOC AQEAm8+AP0Z1aMjJC0suQ6+S8pMFJ8dJzL0yecgZ90X/ERsjKkALrN5GvC8NBISU W9T3Ya7vF1VY7y+ms097xHomwfQ2Lb9l+wZbqvZFlcXcLwBjMpBmZbOguf7B1MOK Zl4tV2kPdjGQxFL/7MXtd6pMXJmkuE1xBoUdl851BnmF0RGMPCy1+C2KjDnIbV1n iGLBydjNfG/nzrt/+DyDiT0GV1g7zGZb9L8JjGxqH4+xZpxL0IpHyNXTNfFis2M8 cDmzkbDAUAWsVB5OB/FlKuEj7Sp2+UQC7MHH/RIvGjlnCa36wdj0uRSbpYn+W5vY rDZdjSrymYF54/vRtzk9QuKQ/w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54LQV4E0Sb3+v1YFX5mw 6uhquuOT0rF+076iusFiHX0+VUk1GlGKCSk+MZQTrs7oiHLmX2q1r/upX9mBdeq3 qeYP0hh099uMwW+Tx8tvSaZZQjj4pYQYwDXO4NELCd4SODjPa7o2zOMC9HAE/Ozx jqBE1POs3ZJ4kLjJ2g7nNazrQOZy15Rf8JZs0/f47jOxz/nLy199ZNzjs49XABpH 1WTmhl7nbhYoEesuD/wkM6nlWVLcPp7nTsE5KyG/KoSI3fgEhbI9vS3VwBLf51SI kVHmvoH+8BAmhfV/Gy9uB/xyHC+XNkatyIBCQNGHjrPVwEE7VGuvif5/8ulXWmHG UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 117129211563160277891685198858421909142 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 06:04:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-05 06:34:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPG Corporation Pte Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.cpgcorp.com.sg' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29225555153502333388152219189494911316207929460543534010784810485939885433839860372483130126699966193053698529123735173949643833460703112218912080587793414978831822608071744209729440253185052256140756978953849059400305400042316992498614593119607932892959693161469811105281429793693814908815607213571485188231138652100037387192009682023624155891270974815343614822769045404354693766762075144063975053863409745788085081689096018436875305603824626574154280555732942543164052793754935038253418548586131534388551655780166765719291734728383712763034349382120696898714174345523334373704818045778590657768856360874020138239571 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cpgcorp.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.cpgcorp.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cpgcorp.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail2.cpgcorp.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpgcorp.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.cpgcorp.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpsmg01.cpgcorp.com.sg' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 01e10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166e29460510000040300473045022100aa63a1651f3f4fe9b44e64334d01b0a3f714dbabe41d726721b0065597d86b4b02207682803a3b7e25ca01f826a471764cac9f659a8cabeba00e9f1e6da704822654007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166e294605a000004030047304502205ffd2c3ce207c4e98a2c94382fabb7f2013e4bf02d30b6ee4dadc697342d28720221009c3779292b0b4e0642dabbef1eaf64f3f9f7296bc724317468581afe9eedc4810077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166e294607a0000040300483046022100e50de9c7e9e9af774e7a509f0c157f14c2fbbabb54e48a68246ebb5f2d81d234022100ffba5079e652aa98dad05e1ca826f56dfa03afe7786be3cc1096b13bbdd5bc00007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000166e294605c0000040300473045022100aa237d1b6eb0536df5454f72f56de08ea8d053bfa443895cdf81c0bcbdcc97e502206d4fb020d4e63f14c41e78e21a1982ce0c69098357e67f38212e6f2b837c5fde . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c887bdd8cd68d6911b11d0c5fa08b7941f314ec2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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