transfer.ohea.org

- Ohio Education Association -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 96:13:4d:e7:34:05:ca:81:00:00:00:00:50:ec:d3:3c was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ohio Education Association

Organization: Ohio Education Association
State / Province: Ohio
Locality: Columbus
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 96:13:4d:e7:34:05:ca:81:00:00:00:00:50:ec:d3:3c
Serial Number (int): 199484433071394786071665308417093587772
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1c:fe:b2:4f:96:58:70:a0:47:fe:8c:d3:d8:17:2a:bc:56:2c:c3:6f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 99:ed:c6:19:65:ef:20:11:5c:c9:c7:68:72:01:bd:f0:26:a1:c8:3b
Fingerprint (sha256): cd:10:1d:96:c8:0e:2c:c7:9f:a6:2e:fb:da:c1:52:c0:24:93:9a:f4:e9:04:89:a5:56:ad:2e:56:49:19:a5:e7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate transfer.ohea.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for transfer.ohea.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

transfer.ohea.org
www.transfer.ohea.org

Other certificates including the domain name ohea.org

(limited to 100 certificates)
mex.ohea.org
Transfer.ohea.org
checkin.ohea.org
www.ohea.org
freecollege.ohea.org
freecollege.ohea.org
freecollege.ohea.org
www.ohea.org
conversations.ohea.org
delegates.ohea.org
checkin.ohea.org
oh-hq-xcaht.ohea.org
intranet.ohea.org
mail.ohea.org
oh-hq-cahtx.ohea.org
gateway.ohea.org
csdblog.ohea.org
freecollege.ohea.org
checkin.ohea.org
www.ohea.org
transfer.ohea.org
scorecard.ohea.org
freecollege.ohea.org
transfer.ohea.org
www.ohea.org
www.ohea.org
SecretServer.ohea.org
mex.ohea.org
freecollege.ohea.org
www.ohea.org
email.ohea.org
transfer.ohea.org
teachertoolkit.ohea.org
freecollege.ohea.org
gateway.ohea.org
www.ohea.org
freecollege.ohea.org
freecollege.ohea.org
www.ohea.org
www.ohea.org
transfer.ohea.org
intranet.ohea.org
delegates.ohea.org
checkin.ohea.org
freecollege.ohea.org
freecollege.ohea.org
checkin.ohea.org
mex.ohea.org
transfer.ohea.org
www.ohea.org
oh-hq-xcaht.ohea.org
Transfer.ohea.org
gateway.ohea.org
vpn.ohea.org
OH-HQ-ACP.ohea.org
freecollege.ohea.org
freecollege.ohea.org
conversations.ohea.org
freecollege.ohea.org
freecollege.ohea.org
freecollege.ohea.org
oh-hq-awlc.ohea.org
checkintest.ohea.org
forms.ohea.org
checkin.ohea.org
csdblog.ohea.org

Certificate

The complete raw certificate details for transfer.ohea.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIRAJYTTec0BcqBAAAAAFDs0zwwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwMTI1MTgyNDUzWhcNMjEwNDI0MTg1NDUxWjBwMQswCQYDVQQGEwJVUzENMAsG
A1UECBMET2hpbzERMA8GA1UEBxMIQ29sdW1idXMxIzAhBgNVBAoTGk9oaW8gRWR1
Y2F0aW9uIEFzc29jaWF0aW9uMRowGAYDVQQDExF0cmFuc2Zlci5vaGVhLm9yZzCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM8PgKVUUXi3VMh3Qek2Xz+h
aTJQiYy8TKuGcSqyiwY+t1GV3K28zzkynlQIPjCPyvu42p4Kl8ilEo7pNTYIcniT
OZ31CzbxjhU9LhN1NngEWth2zCa5br5UivV4PGWgv2mINuUZcMi6wIDIN4cS+8Sv
QAE6+VYhNlwXPtW5jqvikX2H+inKK39cdRwH50eCMWU1vIWEV2z1hLMKmM19X8Sq
O+/RmmwJDq1aRL0uRaXIfA3T9KYbRfEfGbJA/N9EpXj/sDRyxZRMKPsjgnlzhOHH
hsmy2zr9sklF/FOVc+lFCDYUqDcbNLu47G6z6KVdhEC/zvGqgAk3fpqSKJHE4/1Z
kItZW/roKK7tm0JU7TFFUFjKPnThS5eH3jiHRD/eGvCayeWd/ZSMKxTEbYngYH5g
Uf0I777qgB5noU/dqmzLF+0MQJ282DLux0wtuCaQW+oWBU5DlkvMc0g+7ngaKbFC
NKjUeL8I76bKMnVp549bBshFsArFpuiA/egdNsSVzv8z/tjfqhg/POzQCcs2q8vF
LRD4m0D8DMnIHQXgGwLjYJZxeHfO1AtnwIYlK1H1CeTwbywTYdEyygaYn6V9jqnX
1sVsG7hNitnJgSdhT2p+hmStf4+WbG4Zl0e0lROhjJHlIcutw2ei15UTACrMNWpO
pPgdVeHNg8rZnLiBvf+pAgMBAAGjggG0MIIBsDATBgorBgEEAdZ5AgQDAQH/BAIF
ADAzBgNVHREELDAqghF0cmFuc2Zlci5vaGVhLm9yZ4IVd3d3LnRyYW5zZmVyLm9o
ZWEub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9s
ZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcC
ARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUF
BwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYI
KwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNl
cjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUHP6y
T5ZYcKBH/ozT2BcqvFYsw28wCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
Syd+33f8luyujB741q90Qoe/VH7TY1C8Cezep4T5Y4NkwTUxOMjy7v9/5wWqZG6G
HKA6MIFjZVQoH+sO5rTecZTv4AOMQJfbwV3fvy3RRyj0GwxYCg7h0vfcC4wEJoU4
IKXFcKOitTjSe+lx5pPG6SlQCE/Hd2SnYAy2uGFVbgV0wWvCblXrURJ4phjv42o8
cYtfu8sJy8nlZx6iDJzZEQ5CKAZLMZRw45nUYRMW5qSW8YE58oNggzLsg8REl1ib
ApBXKm1m4VzPAIF/b0asanynNedRgb/8XcCYZePQhailLiND7R5QTho7m09q0SeM
nSwfsC1Bbi+WRaSD3ZkNQg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199484433071394786071665308417093587772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 18:24:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-24 18:54:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio Education Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'transfer.ohea.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844733371982034595934507445260434337096439342375649817994601796502095634790596013712200286087579745803018812809273911287502353187303139578136818198762310697546167623149754127189611379415298362390457052177246020737858219618718669195358776281913787622967696925686002898251462538668072746491011338172170553801591414168789960937344782289477182016218452293300658607846074894660030661430150999504715165797531530604136143352589713508269478714837889980044081274798542496416464201089953678904973206251347193874803131695319413529218922785381480356330871790354359212862968249490241719776448559687839155905588605191732147204886972941178859973847165145205504934501444233873988616104955695154227903780350014154015151961680337284616078912538199414868652217525744477720599990230385210244515542833324987696552565462706240891121039164986541193662748127546056641090620469042274679487147731391214661681774927959126948367167044993893946871498541203192768415311403761924409153793187508069320998083467907936687441560620963332636805405685755275545274367676846701751725192253687478894296788832989391544219503918869734549835514603705942753952216388826020945948391666311486808097500907931434640221699226916075936892969007678739913904777427041452110845696671657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfer.ohea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transfer.ohea.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cfeb24f965870a047fe8cd3d8172abc562cc36f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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