webaccess.rosmini.school.nz

- Rosmini College -

Issued by ipsCA Level 1 CA

About this certificate

This digital certificate with serial number 10:ef:b9:df:43:ef:01:25:9d:7b:94:99:14:85:42:cc:a1:05:e9:3f was issued on by ips Certification Authority.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • If present, the SAN extension MUST contain at least one entry (RFC 5280: 4.2.1.6)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Rosmini College

Organization: Rosmini College
Organization unit: IT
State / Province: Auckland
Locality: Northshore
Country: NZ

ips Certification Authority

Organization: ips Certification Authority
Organization unit: Certificaciones
State / Province: MADRID
Locality: MADRID
Country: ES

This certificate has expire since

Certificate Details

Serial Number (hex): 10:ef:b9:df:43:ef:01:25:9d:7b:94:99:14:85:42:cc:a1:05:e9:3f
Serial Number (int): 96689922181794708262833666584934594187710818623
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: e5:d0:4f:0d:33:5f:3d:7e:ef:d5:4e:cb:27:cc:3e:eb:13:15:6b:a1
AuthorityKeyId: 7d:9e:6b:0e:fc:13:e1:c4:8b:a7:7f:61:ae:60:21:cf:cd:a0:d3:06

Fingerprint (sha1): 58:c8:52:43:6f:c0:8d:7b:9b:6e:a9:1b:9e:34:28:3d:fa:ba:23:02
Fingerprint (sha256): c1:cf:9d:bf:2e:3b:b8:fa:09:32:74:23:cf:61:1e:93:09:a4:b5:80:65:9c:e1:67:9c:3f:79:27:45:82:c2:05


Revocation information

OCSP Server: http://ocsplevel101.ipsca.com/ocsp
CRL Distribution Point: http://level101.ipsca.com/crl/ipscalevel1.crl
CRL Distribution Point: http://level102.ipsca.com/crl/ipscalevel1.crl

Check the revocation status for certificate webaccess.rosmini.school.nz

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webaccess.rosmini.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

16 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name rosmini.school.nz

(limited to 100 certificates)
portals.rosmini.school.nz
login.rosmini.school.nz
shop.rosmini.school.nz
shop.rosmini.school.nz
shop.rosmini.school.nz
www.diamondsportsnz.co.nz
portals.rosmini.school.nz
bowlsdunedin.co.nz
meeanee.school.nz
intranet.rosmini.school.nz
*.rosmini.school.nz
portals.rosmini.school.nz
intranet.rosmini.school.nz
rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
www.canterburybaseball.co.nz
*.rosmini.school.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
shop.rosmini.school.nz
shop.rosmini.school.nz
sni.cloudflaressl.com
rosmini.school.nz
portals.rosmini.school.nz
www.opotikicol.school.nz
portals.rosmini.school.nz
portals.rosmini.school.nz
intranet.rosmini.school.nz
shop.rosmini.school.nz
www.ophc.co.nz
www.akaranacityrifleclub.co.nz
distanceridingnewzealand.co.nz
parents.rosmini.school.nz
www.nzfootball.co.nz
portals.rosmini.school.nz
whangareirowingclub.org.nz
intranet.rosmini.school.nz
rosmini.school.nz
sni.cloudflaressl.com
shop.rosmini.school.nz
stem.rosmini.school.nz
*.rosmini.school.nz
shop.rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
www.pukekohesoftball.co.nz
*.rosmini.school.nz
www.rosmini.school.nz
manurewamets.co.nz
stem.rosmini.school.nz
www.rosmini.school.nz
shop.rosmini.school.nz
*.rosmini.school.nz
stem.rosmini.school.nz
intranet.rosmini.school.nz
portals.rosmini.school.nz
canterburybaseball.co.nz
shop.rosmini.school.nz
portals.rosmini.school.nz
www.waihibeachtennisclub.co.nz
webaccess.rosmini.school.nz
*.rosmini.school.nz
intranet.rosmini.school.nz
rosmini.school.nz
www.rosmini.school.nz
www.mooloocommunityrugby.co.nz
portals.rosmini.school.nz
intranet.rosmini.school.nz
www.diamondsportnz.co.nz
intranet.rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
shop.rosmini.school.nz
www.christchurchmetrocricket.co.nz
canterburybaseball.co.nz
www.unimountafc.org.nz
www.crossrecreationcentre.co.nz
www.rosmini.school.nz
www.westcoastsoftball.co.nz
www.marlinsnetball.co.nz
shop.rosmini.school.nz
www.sportsground.com
portals.rosmini.school.nz
portals.rosmini.school.nz
*.rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
www.pauanuilifeguards.org.nz
shop.rosmini.school.nz
stem.rosmini.school.nz
www.rosmini.school.nz
portals.rosmini.school.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for webaccess.rosmini.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7vh20dERovSm0aUQXcR
jKgU/3iFQ0yKusiyi7EwhiVZuhYIMNHUnQpWvT0NEfJ1XsjKV/kpewy9Q3sbyQdW
tLlpj18CT1cs4e3ADXXr1B3zxabDcsivvIRnfvBHOTXgLLVuOXrOxNXMtqVZ3GU5
fK+YblEe3bbTLlql40KseUEJttA4UuBP7KDGaSHe1IlmWaRBfISU69ln8iv0/onD
htU2efa4JUQfdlBTjYT6sxgQSRetALxTiXyJ7IRbqvHwUtCPgz2dZDMdfqJxJd3Z
7BUFXjj9Zqtu9RQHUj2sNfkj4z1aQ4NbGXKyutY9yyRKBCNq2GuIoqLeaVzmDoiC
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96689922181794708262833666584934594187710818623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ips Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certificaciones'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipsCA Level 1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-11 18:48:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-16 18:48:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Northshore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rosmini College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webaccess.rosmini.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21679398340787737440873049617720807202423653452022201428696017054779698367075450746216224239794048030473995893599462887958519162168061015543388843129272497586674756063245892228818337822509488151809305220580743959542672100994061248292713559996451129492501465705404854583769457483858021482558032401712120291361494025362305366486308450356582215185673822633486156604965448031371813132451269344737770004874180755635729185986974171252658977518727516656319090173794589826623578347463506157898784730189121847285841500438064055545433299051103704519330170167697094975762169678300268837280367653117868149757998813639814033212061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5d04f0d335f3d7eefd54ecb27cc3eeb13156ba1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d9e6b0efc13e1c48ba77f61ae6021cfcda0d306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ips Certification Authority'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipsCA Level 1 CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.13 (netscape-comment)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Organization Information NOT VALIDATED. LEVEL1 Server Certificate issued by https://www.ipsca.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.2 (netscape-base-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.4 (netscape-ca-revocation-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.3 (netscape-revocation-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/revocationLEVEL1.html?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.7 (netscape-cert-renewal-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/renewalLEVEL1.html?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.8 (netscape-ca-policy-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/policyLEVEL1.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://level101.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://level102.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsplevel101.ipsca.com/ocsp'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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