webmail.cpgcorp.com.sg

- CPG Corporation Pte Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 58:1e:43:fd:c8:dc:17:42:00:00:00:00:50:e9:b6:96 was issued on by Entrust, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CPG Corporation Pte Ltd

Organization: CPG Corporation Pte Ltd
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:1e:43:fd:c8:dc:17:42:00:00:00:00:50:e9:b6:96
Serial Number (int): 117129211563160277891685198858421909142
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c8:87:bd:d8:cd:68:d6:91:1b:11:d0:c5:fa:08:b7:94:1f:31:4e:c2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6b:b2:ba:5b:6a:df:e6:cb:95:74:39:b6:dc:99:ad:8e:1e:8a:a5:c8
Fingerprint (sha256): c0:a8:93:61:c4:bf:8a:3a:ca:bd:56:d9:57:8f:0c:e6:93:e2:31:35:5f:2d:9c:a3:f6:2d:92:33:2d:2a:2b:89

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate webmail.cpgcorp.com.sg

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.cpgcorp.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.cpgcorp.com.sg
sts.cpgcorp.com.sg
autodiscover.cpgcorp.com.sg
webmail2.cpgcorp.com.sg
cpgcorp.com.sg
smtp.cpgcorp.com.sg
corpsmg01.cpgcorp.com.sg

Other certificates including the domain name cpgcorp.com.sg

(limited to 100 certificates)
gate3.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
truesupport.truerx.com
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
epayslip.cpgcorp.com.sg
eservices.cpgcorp.com.sg
eps.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
wup.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
eservices.cpgcorp.com.sg
gate3.cpgcorp.com.sg
gate3.cpgcorp.com.sg
webmail.cpgcorp.com.sg
support.ata-services.net
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
epayslip.cpgcorp.com.sg
eps.cpgcorp.com.sg
sts.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
eservices.cpgcorp.com.sg
truesupport.truerx.com
gate.cpgcorp.com.sg
wup.cpgcorp.com.sg
support.ata-services.net
Access01.cpgcorp.com.sg
gate.cpgcorp.com.sg
eservices.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate.cpgcorp.com.sg
eps.cpgcorp.com.sg
eservices.cpgcorp.com.sg
support.ata-services.net
support.ata-services.net
gate3.cpgcorp.com.sg
ess.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
servicedesk.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
webmail.cpgcorp.com.sg
lyncwebextdir01.cpgcorp.com.sg
ess.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate2.cpgcorp.com.sg
wup.cpgcorp.com.sg
gate2.cpgcorp.com.sg
sip.cpgcorp.com.sg
support.ata-services.net
sip.cpgcorp.com.sg
sip.cpgcorp.com.sg
eps.cpgcorp.com.sg
gate.cpgcorp.com.sg
gate.cpgcorp.com.sg
webmail.cpgcorp.com.sg
eservices.cpgcorp.com.sg
servicedesk.austinretina.com

Certificate

The complete raw certificate details for webmail.cpgcorp.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIQWB5D/cjcF0IAAAAAUOm2ljANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODExMDUwNjA0MjRaFw0yMDExMDUwNjM0MjNaMGQxCzAJBgNVBAYTAlNHMRIwEAYD
VQQHEwlTaW5nYXBvcmUxIDAeBgNVBAoTF0NQRyBDb3Jwb3JhdGlvbiBQdGUgTHRk
MR8wHQYDVQQDExZ3ZWJtYWlsLmNwZ2NvcnAuY29tLnNnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA54LQV4E0Sb3+v1YFX5mw6uhquuOT0rF+076iusFi
HX0+VUk1GlGKCSk+MZQTrs7oiHLmX2q1r/upX9mBdeq3qeYP0hh099uMwW+Tx8tv
SaZZQjj4pYQYwDXO4NELCd4SODjPa7o2zOMC9HAE/OzxjqBE1POs3ZJ4kLjJ2g7n
NazrQOZy15Rf8JZs0/f47jOxz/nLy199ZNzjs49XABpH1WTmhl7nbhYoEesuD/wk
M6nlWVLcPp7nTsE5KyG/KoSI3fgEhbI9vS3VwBLf51SIkVHmvoH+8BAmhfV/Gy9u
B/xyHC+XNkatyIBCQNGHjrPVwEE7VGuvif5/8ulXWmHGUwIDAQABo4ICLjCCAiow
EwYKKwYBBAHWeQIEAwEB/wQCBQAwgawGA1UdEQSBpDCBoYIWd2VibWFpbC5jcGdj
b3JwLmNvbS5zZ4ISc3RzLmNwZ2NvcnAuY29tLnNnghthdXRvZGlzY292ZXIuY3Bn
Y29ycC5jb20uc2eCF3dlYm1haWwyLmNwZ2NvcnAuY29tLnNngg5jcGdjb3JwLmNv
bS5zZ4ITc210cC5jcGdjb3JwLmNvbS5zZ4IYY29ycHNtZzAxLmNwZ2NvcnAuY29t
LnNnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZl
bDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYa
aHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEB
BFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYB
BQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAf
BgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUyIe92M1o
1pEbEdDF+gi3lB8xTsIwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAaH/D
xpsElp6EfzLTg8pEmG3WrUXJW6CVzVet8PgUYfv/0ctRz3c752KuT5IiYyQ3AzDd
r6UNJSMlVSys6aITZqGghVHnZbk1IvRe6nbPAP56lCfW/0NnnEaJ4iTJRKldzj8u
UiR3ALX+rkARb85hM7EGe9NrryEWrn4t3PNjWLLTPyo4FPz7R7BRY6UwIBztYAS6
qddQLZcZSIlOLTxFuYGaVXUZIuh8eOdNp4qKVIZENG834WSNEV7ijIUuDSTPpmhK
73OQgkPJMtXoxjWKrNtQ9xMREh0Rek8AKTDvNsLtUQQSxLMpiAE52eWrVEa6RQzp
DaD5577OpCd3VLq29w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54LQV4E0Sb3+v1YFX5mw
6uhquuOT0rF+076iusFiHX0+VUk1GlGKCSk+MZQTrs7oiHLmX2q1r/upX9mBdeq3
qeYP0hh099uMwW+Tx8tvSaZZQjj4pYQYwDXO4NELCd4SODjPa7o2zOMC9HAE/Ozx
jqBE1POs3ZJ4kLjJ2g7nNazrQOZy15Rf8JZs0/f47jOxz/nLy199ZNzjs49XABpH
1WTmhl7nbhYoEesuD/wkM6nlWVLcPp7nTsE5KyG/KoSI3fgEhbI9vS3VwBLf51SI
kVHmvoH+8BAmhfV/Gy9uB/xyHC+XNkatyIBCQNGHjrPVwEE7VGuvif5/8ulXWmHG
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117129211563160277891685198858421909142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 06:04:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-05 06:34:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPG Corporation Pte Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.cpgcorp.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29225555153502333388152219189494911316207929460543534010784810485939885433839860372483130126699966193053698529123735173949643833460703112218912080587793414978831822608071744209729440253185052256140756978953849059400305400042316992498614593119607932892959693161469811105281429793693814908815607213571485188231138652100037387192009682023624155891270974815343614822769045404354693766762075144063975053863409745788085081689096018436875305603824626574154280555732942543164052793754935038253418548586131534388551655780166765719291734728383712763034349382120696898714174345523334373704818045778590657768856360874020138239571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cpgcorp.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.cpgcorp.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cpgcorp.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail2.cpgcorp.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpgcorp.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.cpgcorp.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpsmg01.cpgcorp.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c887bdd8cd68d6911b11d0c5fa08b7941f314ec2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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