ussecvmxtdmsq02.eyxstaging.net

- Ernst & Young Nederland LLP -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 02:9f:de:33:4c:d8:77:9a:72:74:3e:a3:0b:1c:b9:9a was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ernst & Young Nederland LLP

Organization: Ernst & Young Nederland LLP
State / Province: Georgia
Locality: Alpharetta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:9f:de:33:4c:d8:77:9a:72:74:3e:a3:0b:1c:b9:9a
Serial Number (int): 3488537951427721771175616248914164122
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 27:29:19:98:c8:57:75:06:13:74:19:d1:99:d7:b4:60:d2:77:67:24
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e6:0f:74:86:be:f8:b0:39:17:42:7c:39:a6:a9:92:2b:10:9e:db:ff
Fingerprint (sha256): eb:f3:f4:40:53:ea:b9:2e:53:de:db:a7:6a:76:cc:02:87:20:77:32:20:3f:ec:98:82:28:bd:0d:d8:2a:3b:f8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ussecvmxtdmsq02.eyxstaging.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ussecvmxtdmsq02.eyxstaging.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ussecvmxtdmsq02.eyxstaging.net

Other certificates including the domain name eyxstaging.net

(limited to 100 certificates)
de63u.ey.com
USSECBMXSQCE110.EYXSTAGING.NET
tasdigitalexperience-uat.ey.com
tms3-stg.ey.com
identity.VWHosting.eyxstaging.net
us.exportapi-tcpu2.eyxstaging.net
eygobi-emeia-stg.ey.com
publish.tasdxportal.eyxstaging.net
globaloneuat1.ey.com
derusvmxbpmsq01.eyxstaging.net
bomgar-poc.ey.com
USSECCMXSPSQ02.eyxstaging.net
derusvlxsphbe02.eyxstaging.net
de41ueyi.ey.com
app-k2u2.ey.com
gobtuat1.ey.com
SessionState-EYTC.eyxstaging.net
eygobi-emeia-stg.ey.com
publish.tasdxportal-uat.ey.com
defra-de41ca.eyxstaging.net
de01u6.ey.com
gobtadmin-EMEIA-stg.ey.com
ws01.onespaceu.eyxstaging.net
ussecvmxtdmsq02.eyxstaging.net
USSECVMSTCEAP02.eyxstaging.net
DEFRNVMXCPTAL01.eyxstaging.net
us41.eyxstaging.net
DERUSVMXGCRAP01.EYXSTAGING.NET
gobtadmin.stgnp.emeia.ey.com
DERUSVMXSQCE030.eyxstaging.net
AIOpsLAM.eyxstaging.net
notify-eyiu2.eyxstaging.net
sfglobalanalytics-stg-core.eyxstaging.net
astrauat.ey.com
eycanvasuat2app-us.eyxstaging.net
us58u.ey.com
adfstestpoc.ey.com
DERUSVMXSCMGW02.EYXSTAGING.NET
App-TrainingCenter.eyxstaging.net
ibmmobility-stg.ey.com
de.stsx.ey.com
apps.VWHosting.eyxstaging.net
apps.VWHosting.eyxstaging.net
USSECBMXSQCE210.EYXSTAGING.NET
cpt2rpt-int.eyxstaging.net
de61u.ey.com
exportapi-eyiu2.ey.com
view.tasdxportalx.eyxstaging.net
defra-de41.eyxstaging.net
spa-de41.eyxstaging.net
DERUSBMXOMSGW01.EYXSTAGING.NET
exportapi-eyiu.ey.com
rptsurvey.stgnp.emeia.eyxstaging.net
EY-BAC-SUT-APP-STG.EYXSTAGING.NET
taxprocesses-stg.eyxstaging.net
tpweb-stg-emeia1.ey.com
DEFRAVMSCPTSSR1.eyxstaging.net
tms1-stg.ey.com
eycanvasuat2apperp-de.eyxstaging.net
bomgar-poc.ey.com
octopus.EYXSTAGING.NET
us.lsiac.eyxstaging.net
de51ueyi.ey.com
wotcapp.eyxstaging.net
eycanvasuat1dpdoc-de.eyxstaging.net
us.wpapi-tcpu1.ey.com
globalaccess-ua.ey.com
invoke-ua.eyxstaging.net
gobtadminuat2.ey.com
us.ssas-tcpu2.eyxstaging.net
ussecbmxsctsq01.eyxstaging.net
de63u.ey.com
ogs.emeia.stg.temp.ey.com
ampf.idaasuat.eyxstaging.net
eybridge-stg-emeia.ey.com
eybridge-stg-emeia.ey.com
tpc1.eyxstaging.net
de41ca.eyxstaging.net
mob-client-app-uat.eyxstaging.net
DEFRNCMXGPPC01.EYXSTAGING.NET
app-k2u2.ey.com
api-custtaxu.ey.com
identity.apprenda.eyxstaging.net
DERUSVMXGCRAP01.EYXSTAGING.NET
DERUSCMXRAMSQ01.eyxstaging.net
DERUSVMXGCRWB04.eyxstaging.net
DEFRABMXOMSGW01.EYXSTAGING.NET
DERUSVMXEKMS01.EYXSTAGING.NET
eycanvasuat3dataerp-de.eyxstaging.net
tms-105-stg.ey.com
picart-ext-stage.ey.com
ogs-EMEIA-stg.ey.com
taxprocesses-stg-temp.ey.com
de15ca.eyxstaging.net
defravlxearpubd.eyxstaging.net
DEFRNVMXCFOAP01.eyxstaging.net
DEFRNVMXBPRSQ01.eyxstaging.net
de01u7.eyxstaging.net
am-uatREP.eyxstaging.net
cbcr-stg-emeia1.ey.com

Certificate

The complete raw certificate details for ussecvmxtdmsq02.eyxstaging.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIQAp/eM0zYd5pydD6jCxy5mjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjEyMTcwNTAwMjlaFw0yNDAxMTQwNTAwMjlaMIGDMQswCQYDVQQGEwJVUzEQMA4G
A1UECBMHR2VvcmdpYTETMBEGA1UEBxMKQWxwaGFyZXR0YTEkMCIGA1UECgwbRXJu
c3QgJiBZb3VuZyBOZWRlcmxhbmQgTExQMScwJQYDVQQDEx51c3NlY3ZteHRkbXNx
MDIuZXl4c3RhZ2luZy5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEVWJUkD+bVVviHseE61E9wQm2E0+vEQySvJuiemSBnrl/6wlokht3x2BSBZ0A
3d/PgWxltY6jRqIfnyga0h0YeH73+dbg9izHBY2pmxX8/QBACMb3VGdX1kXP+skK
qL+XPxFm+mFi4pQY0l1OHkGVyWxzIMfwoXeNq3sj8bT62end3jWQPSjmORPabnkz
faXuKPr/iGeDOUaEPpA5raRArubgfZFQgeqDaez4GGCWXx3IOUCMAlL4JEW1xuQP
uaQCc8hyiMY2hmoCjjIsiz4dBSqbp+iIBMfQu6h9vA7F9rwFtHidN1UCsd/C9b5H
uSdwDBMCoOkEo1XjCPHEId1lAgMBAAGjggGuMIIBqjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQnKRmYyFd1BhN0GdGZ17Rg0ndnJDAfBgNVHSMEGDAWgBSConB03bxT
P8971PfNf6dgxgpMvzBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6
Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1
c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDov
L2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDApBgNVHREEIjAggh51c3NlY3Zt
eHRkbXNxMDIuZXl4c3RhZ2luZy5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBMBgNVHSAERTBDMDcGCmCGSAGG+mwKAQUw
KTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeB
DAECAjATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVMN
iBSTGVXacRI2noq9T3XNq7bE2HjijqOLF6Nj8zNX6yTJDQTCT/8FwzS6VbWt/3Dr
ORY2IW12w0zHF8ELDDgWfkkR/js6oB7g4XytpWJJaX3l3647p2yzUEF7PtoF8laU
HpAhyMpzmrce4MNdNphA7MEC3ats8uP6BfnMhFJ5Bwnq6xLHUkYFDr6Vz6d9wAo8
ymqgBWUFf0kJxj8kvFroH++jZlqb2MePZ+AecC8VCGy7riRPesOPr7Yvz8PwrC5I
uRP5Dn+m/23aYW8CnLrSZDr73A2wSf4iMpgVwaque48R0KQfe/qr1pJB0XHsTCW5
xTOchf22dAzqDSQR1w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFViVJA/m1Vb4h7HhOtR
PcEJthNPrxEMkrybonpkgZ65f+sJaJIbd8dgUgWdAN3fz4FsZbWOo0aiH58oGtId
GHh+9/nW4PYsxwWNqZsV/P0AQAjG91RnV9ZFz/rJCqi/lz8RZvphYuKUGNJdTh5B
lclscyDH8KF3jat7I/G0+tnp3d41kD0o5jkT2m55M32l7ij6/4hngzlGhD6QOa2k
QK7m4H2RUIHqg2ns+Bhgll8dyDlAjAJS+CRFtcbkD7mkAnPIcojGNoZqAo4yLIs+
HQUqm6foiATH0LuofbwOxfa8BbR4nTdVArHfwvW+R7kncAwTAqDpBKNV4wjxxCHd
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3488537951427721771175616248914164122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 05:00:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 05:00:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ussecvmxtdmsq02.eyxstaging.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24784812243711101056591041932382620741866790229858651741052458261137489629444079510821510214601002106390069037720484042095640981458859998792097907772344508366039863216265458519471895082289266932989040230204705012623238743187602044175188983595640558530774398348834984034155707368098259092489838415458374427483365260685094679162843923897338763198975738536366670307064093830191743646730565168616330256560795935380534290696840176232183492792173424812151622788502878063613696366408211164758340166477975900793193407956838055132302011413503180450720579460712244951398046401587372978508016256880533864110925390854109421231461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27291998c8577506137419d199d7b460d2776724
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussecvmxtdmsq02.eyxstaging.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075530d8814931955da7112369e8abd4f75cdabb6c4d878e28ea38b17a363f33357eb24c90d04c24fff05c334ba55b5adff70eb391636216d76c34cc717c10b0c38167e4911fe3b3aa01ee0e17cada56249697de5dfae3ba76cb350417b3eda05f256941e9021c8ca739ab71ee0c35d369840ecc102ddab6cf2e3fa05f9cc8452790709eaeb12c75246050ebe95cfa77dc00a3cca6aa00565057f4909c63f24bc5ae81fefa3665a9bd8c78f67e01e702f15086cbbae244f7ac38fafb62fcfc3f0ac2e48b913f90e7fa6ff6dda616f029cbad2643afbdc0db049fe22329815c1aaae7b8f11d0a41f7bfaabd69241d171ec4c25b9c5339c85fdb6740cea0d2411d7