2work.nasc.biz
- LafargeHolcim -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 55:2f:a9:e3:f5:78:07:10:00:00:00:00:50:ef:f2:31 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
LafargeHolcim
Organization:
LafargeHolcim
State / Province:
Michigan
Locality: Dundee
Country: US
Locality: Dundee
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 55:2f:a9:e3:f5:78:07:10:00:00:00:00:50:ef:f2:31Serial Number (int): 113231863382053825821967396878010020401
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 35:62:88:65:ee:97:7e:3d:22:0e:3d:c4:9b:c0:df:3d:ae:74:91:f1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 07:4f:95:7f:45:a0:e9:9e:5b:63:6f:a2:1f:10:65:4d:57:7e:ae:ba
Fingerprint (sha256): e0:99:2d:7d:d1:df:a1:17:c2:c4:64:58:7d:18:92:22:80:fb:b0:3e:6f:aa:a8:ac:ba:91:3d:4b:7e:ec:51:39
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate 2work.nasc.biz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 2work.nasc.biz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
2work.nasc.biz
www.2work.nasc.biz
www.2work.nasc.biz
Other certificates including the domain name nasc.biz
(limited to 100 certificates)
nascngs.nasc.biz
nascng2.nasc.biz
sps.nasc.biz
nascngs.nasc.biz
2work.nasc.biz
ibcm.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
spd.nasc.biz
sps.nasc.biz
spd.nasc.biz
2work.nasc.biz
vpn.nasc.biz
spd.nasc.biz
sps.nasc.biz
nascng2.nasc.biz
www.nascng2.nasc.biz
iwork.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
vpn.nasc.biz
traveler.nasc.biz
traveler.nasc.biz
vertex-prd.nasc.biz
nascngp.nasc.biz
2work.nasc.biz
nascngq.nasc.biz
spd.nasc.biz
vpnus.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngp.nasc.biz
spd.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
nascngd.nasc.biz
vpnus.nasc.biz
vpn.nasc.biz
2work.nasc.biz
nascng2.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngd.nasc.biz
vertex-prd.nasc.biz
labvpn.nasc.biz
nascng2.nasc.biz
sps.nasc.biz
nascngs.nasc.biz
2work.nasc.biz
ibcm.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
spd.nasc.biz
sps.nasc.biz
spd.nasc.biz
2work.nasc.biz
vpn.nasc.biz
spd.nasc.biz
sps.nasc.biz
nascng2.nasc.biz
www.nascng2.nasc.biz
iwork.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
vpn.nasc.biz
traveler.nasc.biz
traveler.nasc.biz
vertex-prd.nasc.biz
nascngp.nasc.biz
2work.nasc.biz
nascngq.nasc.biz
spd.nasc.biz
vpnus.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngp.nasc.biz
spd.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
nascngd.nasc.biz
vpnus.nasc.biz
vpn.nasc.biz
2work.nasc.biz
nascng2.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngd.nasc.biz
vertex-prd.nasc.biz
labvpn.nasc.biz
Certificate
The complete raw certificate details for 2work.nasc.biz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIQVS+p4/V4BxAAAAAAUO/yMTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTA0MDcwNjA0MTZaFw0yMTA0MDcwNjM0MTVaMGIxCzAJBgNVBAYTAlVTMREwDwYD VQQIEwhNaWNoaWdhbjEPMA0GA1UEBxMGRHVuZGVlMRYwFAYDVQQKEw1MYWZhcmdl SG9sY2ltMRcwFQYDVQQDEw4yd29yay5uYXNjLmJpejCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAM7djv85MmRl8PQEPrzsAwLyxCjIIps8SAA0urCdMovy 7gwjK6d+7CYRpdPWCfq2JvTFk6Ur1fPbVBuXowZw5mR4KBeR5BHghhbXe90lPT5U go11xKJ9vJeE8V1eNA6YKMcsHdrY+rVlJFbMeTocs9BuhvtuCm/J8uo9I1snsn4v CvnVvY6D/H88ZAU8U9y499JJTeBio7avmkh1c4kbPxk75ozpM1EChC93aXzke4nJ FZv14wH2beXZ+LFc8d9V8cUSnwjCTHU2vEDDjHyQaS2c8B6nTR+aS5g8ckaPvfgw GbNACbD4NnWmXBsZhbrUwXhoND9L6dy7aMXAb+TrotUCAwEAAaOCA4kwggOFMC0G A1UdEQQmMCSCDjJ3b3JrLm5hc2MuYml6ghJ3d3cuMndvcmsubmFzYy5iaXowggH2 BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUI Fy+jqh0HE9MMAAABafaBOAIAAAQDAEYwRAIgXKuH52mPOy8icBwVCVZEU3ZWvSgx 6/ohaunw9eehPYcCIBwUaRO5QrNCRRTKQ/lZzAELkPgJvuLE2HEZXvM+kHTeAHYA RJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFp9oE34gAABAMARzBF AiBwuSxcDDjs2QY/YM75gn47KNp2LlfiYmaVbH/yb+4/uAIhAPG5oGFr2XdiiS4u xJOOhyrcR7WsWNpHEXAYurHrFrT7AHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVg wbTq/16ggw8AAAFp9oE41gAABAMASDBGAiEA+hRM9z5oWI9pv3bSiL1BZdXr+M+I BOCfWAEFmR1Xo9wCIQDNT5I4+jou53WNGIfclMuBbi8k7BD4n5QF5kcwujTePgB2 ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABafaBOBMAAAQDAEcw RQIgVVhJWDepAAXjfT15QtsIn4OvrhDsND/IFFFGkb9b8K0CIQC23ZVxfmZALJVf yOX5lhr90koP77FgZVuosIm+XHOJJjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAww CgYIKwYBBQUHAwEwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0 Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggr BgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgG CCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5u ZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWlu MjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4E FgQUNWKIZe6Xfj0iDj3Em8DfPa50kfEwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsF AAOCAQEAU405k0izH9s/QNGNg4PUw9nhSG0uKGP82PXJSllgb08y8y5iLHZ13ax4 ArinHnuromZkSqv4Uekmnl5yvVaKCxWKwyApu4eSRnc6c5ELIA/pjzR9tWMwKcxP NZMlJemCxzP54kMvL0nzUAbPA4S4hQzekjQ5FCrr6Hi6HXZAd3MOEpaNTqmnI8ge 5yhLUqQWhMSBZHWtaLUow2J7JdGJq0RS3BRL6bz00S0cn2QSUIIS8Y4L3lwuYniQ FW0lO4TrkspVQ9djE5MMOIA2lkcyU0L4+pjs3fuko8udn/IvFrtgHh6bRR8oH9Py kn8FqZl6NbVT7awGTUBq8MchUcg5/A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt2O/zkyZGXw9AQ+vOwD AvLEKMgimzxIADS6sJ0yi/LuDCMrp37sJhGl09YJ+rYm9MWTpSvV89tUG5ejBnDm ZHgoF5HkEeCGFtd73SU9PlSCjXXEon28l4TxXV40Dpgoxywd2tj6tWUkVsx5Ohyz 0G6G+24Kb8ny6j0jWyeyfi8K+dW9joP8fzxkBTxT3Lj30klN4GKjtq+aSHVziRs/ GTvmjOkzUQKEL3dpfOR7ickVm/XjAfZt5dn4sVzx31XxxRKfCMJMdTa8QMOMfJBp LZzwHqdNH5pLmDxyRo+9+DAZs0AJsPg2daZcGxmFutTBeGg0P0vp3LtoxcBv5Oui 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 113231863382053825821967396878010020401 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 06:04:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-07 06:34:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dundee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LafargeHolcim' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2work.nasc.biz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26114345431718198251985045392909864347397434956362854019459110867437616248835578867236366410172148569737036592640263434162029664707753283087814293952329191779515230982048543071714568577666243500982959014982872228877732665406653887032899749578265754486233579635352861764084146431536723219221253488988770493466686310435733581299628410030517525464290683145462197651372223421911557587611137879920541586615084570381672713729805072199305904906644633474011477883741367067854357377738274089417773975267435723251858721066480028196253231632280843234538199079438456359746438156023309700060770084784086916462526723294689787355861 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2work.nasc.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2work.nasc.biz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 01e00075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000169f6813802000004030046304402205cab87e7698f3b2f22701c15095644537656bd2831ebfa216ae9f0f5e7a13d8702201c146913b942b3424514ca43f959cc010b90f809bee2c4d871195ef33e9074de0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000169f68137e20000040300473045022070b92c5c0c38ecd9063f60cef9827e3b28da762e57e26266956c7ff26fee3fb8022100f1b9a0616bd97762892e2ec4938e872adc47b5ac58da47117018bab1eb16b4fb0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169f68138d60000040300483046022100fa144cf73e68588f69bf76d288bd4165d5ebf8cf8804e09f580105991d57a3dc022100cd4f9238fa3a2ee7758d1887dc94cb816e2f24ec10f89f9405e64730ba34de3e007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169f6813813000004030047304502205558495837a90005e37d3d7942db089f83afae10ec343fc814514691bf5bf0ad022100b6dd95717e66402c955fc8e5f9961afdd24a0fefb160655ba8b089be5c738926 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 35628865ee977e3d220e3dc49bc0df3dae7491f1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00538d399348b31fdb3f40d18d8383d4c3d9e1486d2e2863fcd8f5c94a59606f4f32f32e622c7675ddac7802b8a71e7baba266644aabf851e9269e5e72bd568a0b158ac32029bb879246773a73910b200fe98f347db5633029cc4f35932525e982c733f9e2432f2f49f35006cf0384b8850cde923439142aebe878ba1d764077730e12968d4ea9a723c81ee7284b52a41684c4816475ad68b528c3627b25d189ab4452dc144be9bcf4d12d1c9f6412508212f18e0bde5c2e627890156d253b84eb92ca5543d76313930c3880369647325342f8fa98ecddfba4a3cb9d9ff22f16bb601e1e9b451f281fd3f2927f05a9997a35b553edac064d406af0c72151c839fc