egovcafservices.nsdl.com

- NSDL e-Governance Infrastructure Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 90:fe:1b:8f:16:bb:94:8c:00:00:00:00:50:f9:b5:97 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSDL e-Governance Infrastructure Limited

Organization: NSDL e-Governance Infrastructure Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 90:fe:1b:8f:16:bb:94:8c:00:00:00:00:50:f9:b5:97
Serial Number (int): 192728233756817710887817847396363777431
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cd:11:2f:a6:b6:40:10:2d:f1:87:3f:0f:6a:a1:f6:74:ed:63:49:44
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 3e:d1:7f:e3:0f:38:ba:1f:0d:a8:bc:88:12:e2:22:74:e6:41:7e:b5
Fingerprint (sha256): df:7b:c8:82:7b:6d:7e:78:a7:d3:58:ef:be:e6:8d:0c:0a:c2:4b:6e:11:f9:96:69:5d:dd:35:df:f4:62:42:a4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate egovcafservices.nsdl.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egovcafservices.nsdl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

egovcafservices.nsdl.com
eservices.egov-nsdl.com

Other certificates including the domain name nsdl.com

(limited to 100 certificates)
www.edocs.nsdl.com
uat-api.nsdl.com
uatmobileservice.nsdl.com
qfi.nsdl.com
onlineservices.nsdl.com
care.koinx.com
tin.tin.nsdl.com
onlineservices.epayment.nsdl.com
qfi.nsdl.com
eservices.nsdl.com
ua.egov-nsdl.com
pandashboard.egov-nsdl.com
support.tpstech.in
www.epass.nsdl.com
uatmobileservice.nsdl.com
dpmshr.nsdl.com
eservices-test.nsdl.com
qfi.nsdl.com
tin.tin.nsdl.com
edpm.nsdl.com
egovcafservices.nsdl.com
www.evoting.nsdl.com
onlineservices.epayment.nsdl.com
www.evoting.nsdl.com
mynps.nsdl.com
support.ignitecinc.com
www.nsdlcas.nsdl.com
eapprovals.nsdl.com
uat-api.nsdl.com
pandashboard.egov-nsdl.com
aadhaar.nsdl.com
www.indiabondinfo.nsdl.com
eservices.nsdl.com
www.edocs.nsdl.com
steadyassist.nsdl.com
ua.egov-nsdl.com
steadyassist.nsdl.com
mynps.nps-proteantech.in
www.stagingportal.nsdl.com
egovmcaservices.nsdl.com
www.indiabondinfo.nsdl.com
onlineservices.tin.nsdl.com
www.fci.nsdl.com
support.alphacloudtech.com
edpm.nsdl.com
uatmobileservice.nsdl.com
onlineservices.epayment.nsdl.com
delivery.accessbankplc.com
dpmshr.nsdl.com
edpm.nsdl.com
nsdlcas.nsdl.com
www.fci.nsdl.com
dematgw.eservices.nsdl.com
ns1.savorganicproducts.store
uat-api.nsdl.com
www.fpi.nsdl.co.in
www.epass.nsdl.com
dpm.nsdl.com
tin.tin.nsdl.com
support.dnsraw.com
support.watchtower365.com
eNPS.nsdl.com
stagingmobileservice.nsdl.com
www.epass.nsdl.com
cradashboard.nsdl.com
www.edocs.nsdl.com
support.watchtower365.com
cradashboard.nsdl.com
eservices.nsdl.com
ua.egov-nsdl.com
qfi.nsdl.com
test.egovcafservices.nsdl.com
www.evoting.nsdl.com
edpm.nsdl.com
dematgw.nsdl.com
edpm.nsdl.com
tin.tin.nsdl.com
cbec.nsdl.com
dpmshr.nsdl.com
eservices.nsdl.com
nsdlca.nsdl.com
www.epass.nsdl.com
uatportal.nsdl.com
steadyassist.nsdl.com
uat-support.nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
tin.tin.nsdl.com
eNPS.nsdl.com
onlineservices.epayment.nsdl.com
tin.tin.nsdl.com
eservices.nsdl.com
helpdesk.sidcorptech.com
www.DepositoryMeetings.nsdl.com
www.indiabondinfo.nsdl.com
edpm.nsdl.com
cbec.nsdl.com
edpm.nsdl.com
stagingportal.nsdl.com
stagingmobileservice.nsdl.com

Certificate

The complete raw certificate details for egovcafservices.nsdl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIRAJD+G48Wu5SMAAAAAFD5tZcwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkxMTA2MTM1MzQ1WhcNMjExMTA2MTQyMzQ0WjCBijELMAkGA1UEBhMCSU4xFDAS
BgNVBAgTC01haGFyYXNodHJhMQ8wDQYDVQQHEwZNdW1iYWkxMTAvBgNVBAoTKE5T
REwgZS1Hb3Zlcm5hbmNlIEluZnJhc3RydWN0dXJlIExpbWl0ZWQxITAfBgNVBAMT
GGVnb3ZjYWZzZXJ2aWNlcy5uc2RsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM13hHuejlI22y+XJDqizqgvi+IGYfLTB1LaE0ZpNif4fZnteYhH
fmio5PilgsCKtLc50GtkmMuMtPONjxaLvPbm+ZaGyi1BwKXISEA09WrPVokGbJUR
/bV3xjoTmpZR2X9d+pmAMpehwSfvikKcRf7JTXoUqi8a2phFCAROFWZIYCLSPbqT
sy8oq1J4XRywoG7hRgDWD4zwTI90w22yDIV12zIRuAWPiQKydvAYx6yKaiK1le8Q
EAVcSsNuRddkFKd499F04KYnLo0x2gghV91vNp1fC+IlMZ/FdKgrpqZWECKwq+c3
ls96dg3d1mM88W0zOf5LcI5jCcYHEd92SskCAwEAAaOCAb0wggG5MBMGCisGAQQB
1nkCBAMBAf8EAgUAMDwGA1UdEQQ1MDOCGGVnb3ZjYWZzZXJ2aWNlcy5uc2RsLmNv
bYIXZXNlcnZpY2VzLmVnb3YtbnNkbC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZI
AYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3Jw
YTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8v
b2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0
Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/
p2DGCky/MB0GA1UdDgQWBBTNES+mtkAQLfGHPw9qofZ07WNJRDAJBgNVHRMEAjAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCb0EjCIw4g3Vd2MZ9fftTITcr4mfbDzxiLaL6V
ZmJo12x26NHN87hPHzopV2uFgBhFh2uaQFuOCV0Ct+hBDrdUNp6vOuI3IxYvMwN5
nyjGl2Kl7i+Ty1wXh7ohldX1Pw2TLw/PcZ7qrd6zrTKkVxUSJXlxV+2ljPZHYZ7K
oJgBDyYQ+K/pUmMa0RAZ29XzDMKYFug6o/P/hRhqyqAoP5MNgexf6bowIH8R6NuA
l55y7B2qbNhcgQX2q1KsvfpZHGBNSHPf4WtCZhAzYXy8WkodGIlzbFMu8tL8eUhD
GRx0glLnTeflH8DraTd7pwvkyGQp4Ur1nEyuf28hJ8sUsvlb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXeEe56OUjbbL5ckOqLO
qC+L4gZh8tMHUtoTRmk2J/h9me15iEd+aKjk+KWCwIq0tznQa2SYy4y0842PFou8
9ub5lobKLUHApchIQDT1as9WiQZslRH9tXfGOhOallHZf136mYAyl6HBJ++KQpxF
/slNehSqLxramEUIBE4VZkhgItI9upOzLyirUnhdHLCgbuFGANYPjPBMj3TDbbIM
hXXbMhG4BY+JArJ28BjHrIpqIrWV7xAQBVxKw25F12QUp3j30XTgpicujTHaCCFX
3W82nV8L4iUxn8V0qCumplYQIrCr5zeWz3p2Dd3WYzzxbTM5/ktwjmMJxgcR33ZK
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 192728233756817710887817847396363777431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 13:53:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-06 14:23:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSDL e-Governance Infrastructure Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egovcafservices.nsdl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25937788799440325333359403022684745840267929727438583654420157255748361092945970595142642587794944803030614128270632297467459305106408704245430832413341775205068964838026840268368612031148840424762444654297611718503452647630075092884814171064365188812428847484014331656678506507183983516545749496473634471593726740282289332750678464304148357406097073179784721820716098351286712839745163047705891214480347230424265332766352311699031636747000322581203177141549257188633724066040917549968216932977124196218248063527242629447286368830045034897588775422856174578859200901899045094291405640977568043460303843916988737276617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egovcafservices.nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.egov-nsdl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd112fa6b640102df1873f0f6aa1f674ed634944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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