annit.osuuspankki.fi

- OP Osuuskunta -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 74:02:4c:42:86:9e:1a:b1:00:00:00:00:50:e2:0c:f7 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OP Osuuskunta

Organization: OP Osuuskunta
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 74:02:4c:42:86:9e:1a:b1:00:00:00:00:50:e2:0c:f7
Serial Number (int): 154202378838618042022658787427624291575
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e4:3f:bb:4a:d3:fc:10:be:4c:57:24:cc:75:bc:e9:61:c4:bb:3c:6f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f2:51:ac:8d:d5:6c:d1:09:22:f6:2d:96:c7:9f:94:b2:cb:89:ec:b8
Fingerprint (sha256): dc:e7:1b:08:d8:f8:ad:60:df:86:f6:97:50:b5:12:2e:25:72:7c:64:ff:48:8f:b5:82:99:cc:4b:ab:ad:b8:fe

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate annit.osuuspankki.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for annit.osuuspankki.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annit.osuuspankki.fi
www.annit.osuuspankki.fi

Other certificates including the domain name osuuspankki.fi

(limited to 100 certificates)
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
webmail.op-palvelut.net
kultaraha.osuuspankki.fi
www.osuuspankki.fi
kultaraha.osuuspankki.fi
www.op.fi
annit.osuuspankki.fi
op.fi
annit.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
op.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
annit.osuuspankki.fi
www.osuuspankki.fi
op.fi
www.op.fi
annit.osuuspankki.fi
kultaraha.osuuspankki.fi
op.fi
webmail.op-palvelut.net
op.fi
annit.osuuspankki.fi
op.fi
webmail.op-palvelut.net
annit.osuuspankki.fi
op.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
webmail.op-palvelut.net
op.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
op.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
annit.osuuspankki.fi
www.osuuspankki.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
www.op.fi

Certificate

The complete raw certificate details for annit.osuuspankki.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOzCCBiOgAwIBAgIQdAJMQoaeGrEAAAAAUOIM9zANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA0MjQwNjE0NTNaFw0yMDA0MjQwNjQ0NTJaMFcxCzAJBgNVBAYTAkZJMREwDwYD
VQQHEwhIZWxzaW5raTEWMBQGA1UEChMNT1AgT3N1dXNrdW50YTEdMBsGA1UEAxMU
YW5uaXQub3N1dXNwYW5ra2kuZmkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCLPURB7YOVuK2SZ6MZxPncyC0XNbgq8XVTKBZ2YW6XpB+S4N2n5k5JG0wf
2w4Gdz8RQzNFwadlaCSDvQNI4ExlokqjLKsrxMOdr1MiBTUxUraOyuOY5/7kzwhr
79RqHoTG0wMvkxqVG8Aya3IDsTpyboO/UjCar7uprzqH1z3yTiafXQn4rOk9Unhb
WB+uTmdsb8M9ZIsSe0RFjJV21drZ/+1sXAsgIbTqx10w508g5ewAV+BqSyIchli5
5wzARpMMlzmOKranol1+wzFx5GlTccONsUCmH1IYcmN+R/1yFE0aDn79HLYpCsxV
9ExCAVx0izT4WrVsBa1POZZdfM21AgMBAAGjggOdMIIDmTA5BgNVHREEMjAwghRh
bm5pdC5vc3V1c3BhbmtraS5maYIYd3d3LmFubml0Lm9zdXVzcGFua2tpLmZpMIIB
9AYKKwYBBAHWeQIEAgSCAeQEggHgAd4AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAl
CBcvo6odBxPTDAAAAWL2ZdvkAAAEAwBHMEUCIQCDPIH4eT3XqcsFq0vFa7K6bS4I
VA/9N5SOxzSmnvugIQIgPT3Ae4ohK5AucxJOC+ZYGgS15lr5S4poSi9FcI7PhrUA
dQDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAWL2ZdvPAAAEAwBG
MEQCIDNN2/+XOusz3Qqy8u62+HwsH9348ZrqY7FXXpT7dgRaAiBmJNOQhQ+6M3DU
z/FEww4M2ee6wwG2wunD0RB+/eC96gB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1Lo
GpCWZDaOHtGFAAABYvZl3AMAAAQDAEcwRQIhAIN/0J1pRdER4zi3boX//gSKwD7p
3Tr6crOgQeN2qg6PAiAtDddn5Rkmlj4Ek+RqlUD87Q1JGUv0S3M4pRVmYt0knQB1
AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABYvZl2/sAAAQDAEYw
RAIgCRw9jnQYCHZozWUWB1DYjhxGz8bR+zI6gR+3A+qJ9iACIHtivZGkt/wAl9NE
GX2RmEvD7ACd9wvAnXWst8otmDhmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2Ny
bC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwK
AQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYG
Z4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au
ZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQv
bDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpM
vzAdBgNVHQ4EFgQU5D+7StP8EL5MVyTMdbzpYcS7PG8wCQYDVR0TBAIwADANBgkq
hkiG9w0BAQsFAAOCAQEAIzoxdRj2hZVGFd5IeFoTZNHZChCejKj9CQweTBCj/Vqs
bcP9MM6CHzU3X7jPEpJrDhvGPLJoksSbeBSO42sMBOa+R23MkYW15wctpLSH3jqs
N0oKXR7RnOlQriZRpUGEYFFfmMdSq7UJzer+dEBXOL8MfRa3br9N8624vnrKDaZW
sbgLR5G5rvJJTwT5t6YSaXKLyWLAaRh04U7X+88pI9LGHbFPVB573z1mqg71Fa9A
vsebDV1ecIKii+YzMLrUOgo5rlKXm+mH6ITBvTh/gwF8R9R6nnP89oN5wu1Ww8QN
6QzOjGMCaB3gKdTBmyyEpAFB/5e0xVDxvrs5HZXQDw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz1EQe2DlbitkmejGcT5
3MgtFzW4KvF1UygWdmFul6QfkuDdp+ZOSRtMH9sOBnc/EUMzRcGnZWgkg70DSOBM
ZaJKoyyrK8TDna9TIgU1MVK2jsrjmOf+5M8Ia+/Uah6ExtMDL5MalRvAMmtyA7E6
cm6Dv1Iwmq+7qa86h9c98k4mn10J+KzpPVJ4W1gfrk5nbG/DPWSLEntERYyVdtXa
2f/tbFwLICG06sddMOdPIOXsAFfgaksiHIZYuecMwEaTDJc5jiq2p6JdfsMxceRp
U3HDjbFAph9SGHJjfkf9chRNGg5+/Ry2KQrMVfRMQgFcdIs0+Fq1bAWtTzmWXXzN
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154202378838618042022658787427624291575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-24 06:14:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 06:44:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OP Osuuskunta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'annit.osuuspankki.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17577336092023056217077123193096246679490565791560773942845306310690971067049610536012267169735519115320802349648106163830228313285955856776294480768114106850901467469470393022428888458210951549961599186389220151390941877141399819278250039121886723897877225165868545896361501511222250712591474459788037251667821727473890505590808468692837632768380613993150043350090246283889506367921403850627696061578796092575623597395751610704268632982486716743345359526842049556901447427896277535904816523113411307243957184948721513050270424199264880206514900187289745950416028881761988660054738147842534753635619467880725200293301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annit.osuuspankki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annit.osuuspankki.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162f665dbe40000040300473045022100833c81f8793dd7a9cb05ab4bc56bb2ba6d2e08540ffd37948ec734a69efba02102203d3dc07b8a212b902e73124e0be6581a04b5e65af94b8a684a2f45708ecf86b5007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000162f665dbcf00000403004630440220334ddbff973aeb33dd0ab2f2eeb6f87c2c1fddf8f19aea63b1575e94fb76045a02206624d390850fba3370d4cff144c30e0cd9e7bac301b6c2e9c3d1107efde0bdea007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162f665dc030000040300473045022100837fd09d6945d111e338b76e85fffe048ac03ee9dd3afa72b3a041e376aa0e8f02202d0dd767e51926963e0493e46a9540fced0d49194bf44b7338a5156662dd249d007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162f665dbfb00000403004630440220091c3d8e7418087668cd65160750d88e1c46cfc6d1fb323a811fb703ea89f62002207b62bd91a4b7fc0097d344197d91984bc3ec009df70bc09d75acb7ca2d983866
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e43fbb4ad3fc10be4c5724cc75bce961c4bb3c6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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