ap04scjlfeapool.scj.csfm.global
- S.C. Johnson & Son Inc. -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number d4:6f:1c:70:42:a5:f5:01:00:00:00:00:50:e6:3b:a4 was issued on by Entrust, Inc..
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
S.C. Johnson & Son Inc.
Organization:
S.C. Johnson & Son Inc.
State / Province:
Wisconsin
Locality: Racine
Country: US
Locality: Racine
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): d4:6f:1c:70:42:a5:f5:01:00:00:00:00:50:e6:3b:a4Serial Number (int): 282373256859349275173431898359741168548
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 37:84:65:68:6d:cb:9b:2d:45:ce:10:bf:43:ed:a3:22:17:2f:66:29
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 6d:24:b0:63:85:48:ec:11:1a:b6:d7:61:68:f6:72:85:d0:d7:6a:49
Fingerprint (sha256): d9:67:4c:12:90:aa:1d:bf:10:51:88:92:76:f7:f9:b0:9f:8f:ed:1c:15:9b:47:2c:46:82:8e:ac:3e:e5:25:bf
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate ap04scjlfeapool.scj.csfm.global
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ap04scjlfeapool.scj.csfm.global
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ap04scjlfeapool.scj.csfm.global
admin.scj.oncsfm.com
lyncdiscoverinternal.scj.com
ap04scjlfeawebin01.scj.oncsfm.com
ap04scjlfea03.scj.csfm.global
ap04scjlfea01.scj.csfm.global
join.scj.oncsfm.com
dialin.scj.oncsfm.com
lyncdiscoverinternal.scj.oncsfm.com
ap04scjlfea02.scj.csfm.global
sip.scj.com
sip.scj.oncsfm.com
scheduler.scj.oncsfm.com
sip.debgroup.com
sip.debmed.com
sip.debstoko.com
lyncdiscoverinternal.debgroup.com
lyncdiscoverinternal.debmed.com
lyncdiscoverinternal.debstoko.com
admin.scj.oncsfm.com
lyncdiscoverinternal.scj.com
ap04scjlfeawebin01.scj.oncsfm.com
ap04scjlfea03.scj.csfm.global
ap04scjlfea01.scj.csfm.global
join.scj.oncsfm.com
dialin.scj.oncsfm.com
lyncdiscoverinternal.scj.oncsfm.com
ap04scjlfea02.scj.csfm.global
sip.scj.com
sip.scj.oncsfm.com
scheduler.scj.oncsfm.com
sip.debgroup.com
sip.debmed.com
sip.debstoko.com
lyncdiscoverinternal.debgroup.com
lyncdiscoverinternal.debmed.com
lyncdiscoverinternal.debstoko.com
Other certificates including the domain name csfm.global
(limited to 100 certificates)
ap05scjlaeapool.scj.csfm.global
na09sollaeapool.sol.csfm.global
eu08scjlaeapool.scj.csfm.global
eu06scjlaeapool.scj.csfm.global
eu08scjlfeapool.scj.csfm.global
na09sollaeapool.sol.csfm.global
ap05scjlfeapool.scj.csfm.global
na09sollfeapool.sol.csfm.global
ap03scjlfeapool.scj.csfm.global
ap04scjlfeapool.scj.csfm.global
na12scjlaeapool.scj.csfm.global
na12scjlfeapool.scj.csfm.global
na09scjlaeapool.scj.csfm.global
eu06scjlfeapool.scj.csfm.global
ap04scjlfeapool.scj.csfm.global
ap04scjlaeapool.scj.csfm.global
na09scjlfeapool.scj.csfm.global
na09sollfeapool.sol.csfm.global
na09sollaeapool.sol.csfm.global
eu08scjlaeapool.scj.csfm.global
eu06scjlaeapool.scj.csfm.global
eu08scjlfeapool.scj.csfm.global
na09sollaeapool.sol.csfm.global
ap05scjlfeapool.scj.csfm.global
na09sollfeapool.sol.csfm.global
ap03scjlfeapool.scj.csfm.global
ap04scjlfeapool.scj.csfm.global
na12scjlaeapool.scj.csfm.global
na12scjlfeapool.scj.csfm.global
na09scjlaeapool.scj.csfm.global
eu06scjlfeapool.scj.csfm.global
ap04scjlfeapool.scj.csfm.global
ap04scjlaeapool.scj.csfm.global
na09scjlfeapool.scj.csfm.global
na09sollfeapool.sol.csfm.global
Certificate
The complete raw certificate details for ap04scjlfeapool.scj.csfm.global in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHUjCCBjqgAwIBAgIRANRvHHBCpfUBAAAAAFDmO6QwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTgwODE1MjAzOTA4WhcNMTkwODE1MjEwOTA3WjB+MQswCQYDVQQGEwJVUzESMBAG A1UECBMJV2lzY29uc2luMQ8wDQYDVQQHEwZSYWNpbmUxIDAeBgNVBAoMF1MuQy4g Sm9obnNvbiAmIFNvbiBJbmMuMSgwJgYDVQQDEx9hcDA0c2NqbGZlYXBvb2wuc2Nq LmNzZm0uZ2xvYmFsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX7x sacNCYedsLHyxG2AqvrQqwHR52zz1OdCSbYhA1gfBS482TdmWMNS1xXI+kckN8jt G9XkymoRlNXmQzNRc8FsligSaiqSugcmQHlrn1IbKkXiHl216fcwDeNv45jd0YRf U6wqj47hn/Et0qXXnTdY/LG9jvu49Nfy5JtLiqnz1PFSS58m3ly9D7syfZWbWND7 ig9pixk8kGGKhkJPYtJOznh1vKturL/qsE9SacJZXBFIR+zInXnUjofaAavfaYeK s57qZ6bCRPSuaF7RPLP0gASCx0G99zzkU1faC/4dbQgAaYyEZVAIuQFz+lLeNFE4 Yt1ov49N0+U6zHS3+wIDAQABo4IDjDCCA4gwEwYKKwYBBAHWeQIEAwEB/wQCBQAw ggIJBgNVHREEggIAMIIB/IIfYXAwNHNjamxmZWFwb29sLnNjai5jc2ZtLmdsb2Jh bIIUYWRtaW4uc2NqLm9uY3NmbS5jb22CHGx5bmNkaXNjb3ZlcmludGVybmFsLnNj ai5jb22CIWFwMDRzY2psZmVhd2ViaW4wMS5zY2oub25jc2ZtLmNvbYIdYXAwNHNj amxmZWEwMy5zY2ouY3NmbS5nbG9iYWyCHWFwMDRzY2psZmVhMDEuc2NqLmNzZm0u Z2xvYmFsghNqb2luLnNjai5vbmNzZm0uY29tghVkaWFsaW4uc2NqLm9uY3NmbS5j b22CI2x5bmNkaXNjb3ZlcmludGVybmFsLnNjai5vbmNzZm0uY29tgh1hcDA0c2Nq bGZlYTAyLnNjai5jc2ZtLmdsb2JhbIILc2lwLnNjai5jb22CEnNpcC5zY2oub25j c2ZtLmNvbYIYc2NoZWR1bGVyLnNjai5vbmNzZm0uY29tghBzaXAuZGViZ3JvdXAu Y29tgg5zaXAuZGVibWVkLmNvbYIQc2lwLmRlYnN0b2tvLmNvbYIhbHluY2Rpc2Nv dmVyaW50ZXJuYWwuZGViZ3JvdXAuY29tgh9seW5jZGlzY292ZXJpbnRlcm5hbC5k ZWJtZWQuY29tgiFseW5jZGlzY292ZXJpbnRlcm5hbC5kZWJzdG9rby5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNV HR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3Js MEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8v d3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMG CCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYn aHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQY MBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBQ3hGVobcubLUXOEL9D 7aMiFy9mKTAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQACRWWjGHopRjVn 3+rOtLb3H+ti3i/fwIHTbULvWoDYaFBLlfTsjd+Dsl9SdIkBa9Vfk385t/nTTPAH 1HDW3Wyspmpqsx3OXYyM0P6LasE3Qq8KwPdwK0SpA8Ql+rH7bfZgRuhSKt/fStVw RH85UqvHon2HHAcNvhhpB86vZUr+H4pAD/Hs1UfHwH7U/pmsie7UiVuR59t7X8Hh WhZJcF/2D3kJzurc8PdpjmzuDpiEBXb9hv7dhCBiDMVqTQ9J+QgBwOpOuwTQ7bll sWjiYD/qE/ylHqaStSZKhCyVjWRDnZmEsKrovgp4GdqISYid/0InHTni55LI+pxQ ponCsCK9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX7xsacNCYedsLHyxG2A qvrQqwHR52zz1OdCSbYhA1gfBS482TdmWMNS1xXI+kckN8jtG9XkymoRlNXmQzNR c8FsligSaiqSugcmQHlrn1IbKkXiHl216fcwDeNv45jd0YRfU6wqj47hn/Et0qXX nTdY/LG9jvu49Nfy5JtLiqnz1PFSS58m3ly9D7syfZWbWND7ig9pixk8kGGKhkJP YtJOznh1vKturL/qsE9SacJZXBFIR+zInXnUjofaAavfaYeKs57qZ6bCRPSuaF7R PLP0gASCx0G99zzkU1faC/4dbQgAaYyEZVAIuQFz+lLeNFE4Yt1ov49N0+U6zHS3 +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 282373256859349275173431898359741168548 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 20:39:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 21:09:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Racine' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'S.C. Johnson & Son Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap04scjlfeapool.scj.csfm.global' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25941450995218162577705303518116926737898082159466592758456120689161058122851045338733075109348955177133227807409152635581276904214309545583300384809219953188343770308887896558596024035969415065089179361696572102540339793011685121400514166400712012344106820149298109294049870187628549504379692434677252961595776007197204976756427475416796996309984550279041913813523413553362942934808366146300537111233021096876598491731060154660297329428027495477023278091266775436738820622360751156020513464517394429905043805260786773145802847144342801522113285574131935292315068780768922721441420379197694320117926862320569064667131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (512 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap04scjlfeapool.scj.csfm.global' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.scj.oncsfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.scj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap04scjlfeawebin01.scj.oncsfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap04scjlfea03.scj.csfm.global' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap04scjlfea01.scj.csfm.global' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.scj.oncsfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.scj.oncsfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.scj.oncsfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap04scjlfea02.scj.csfm.global' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.scj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.scj.oncsfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.scj.oncsfm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.debgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.debmed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.debstoko.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.debgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.debmed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.debstoko.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 378465686dcb9b2d45ce10bf43eda322172f6629 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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