certforssl247apiA.yves-rocher.de

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 71:52:8d:d9:02:b8:65:1d:00:00:00:00:50:e4:c3:8b was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
Locality: Morbihan
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:52:8d:d9:02:b8:65:1d:00:00:00:00:50:e4:c3:8b
Serial Number (int): 150631408879202619848982862750839784331
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0f:60:4e:e9:8e:dc:84:54:a6:0e:d7:80:4e:22:90:25:32:f2:e6:34
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d6:a5:c9:41:3d:43:9b:a7:19:1a:e1:a6:1c:71:c2:6e:f0:dd:86:f5
Fingerprint (sha256): f8:d3:d9:f8:52:7d:6a:a2:6e:44:6f:74:e9:ed:c2:13:fe:c9:ac:0d:4b:cc:0d:04:ea:dc:f1:8c:7e:1c:70:0c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate certforssl247apiA.yves-rocher.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for certforssl247apiA.yves-rocher.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certforssl247apiA.yves-rocher.de
www.certforssl247apiA.yves-rocher.de

Other certificates including the domain name yves-rocher.de

(limited to 100 certificates)
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
t-www.yves-rocher.at
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
survey.yves-rocher.fr
www.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
www.yves-rocher.fr
news.yves-rocher.de
t-www.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
search.yves-rocher.de
t-www.yves-rocher.at
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.at
versand.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
news.yves-rocher.de
secureorder.m.yvesrocher.com.tr
secureorder.m.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.de
nocdn-w.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
search.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
news.yves-rocher.de
news.yves-rocher.de
www.yves-rocher.fr
versand.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
secureorder.yves-rocher.de
survey.yves-rocher.fr
news.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
prod.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
www.yves-rocher.fr
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
certforssl247apiA.yves-rocher.de
secureorder.m.yvesrocher.com.tr
versand.yves-rocher.de
secureorder.yves-rocher.de
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr

Certificate

The complete raw certificate details for certforssl247apiA.yves-rocher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIQcVKN2QK4ZR0AAAAAUOTDizANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA3MTEwOTE3MTFaFw0xOTA3MTEwOTQ3MTBaMIGDMQswCQYDVQQGEwJGUjERMA8G
A1UEBxMITW9yYmloYW4xNjA0BgNVBAoTLUxhYm9yYXRvaXJlcyBkZSBCaW9sb2dp
ZSBWZWdldGFsZSBZdmVzIFJvY2hlcjEpMCcGA1UEAxMgY2VydGZvcnNzbDI0N2Fw
aUEueXZlcy1yb2NoZXIuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzbD+2C67hJvi/VhFZUZZUtZkfZRomQINVVS4b2VC7rbPNCckxa/SCedux4Mhk
M8SLxtN2z7gs4N6D3v6FCmKqm1VFCLOfLVhrKCLrKUahXrRjs16NOAy9fy26wclC
/TsBjoxRjGTf1Z6yIV5VIiBEYOTEdXffSh1S1m5bYrxH4V37XXZ/Pl0c8IexXFvn
NAqfSb53kz2hAV3Fa7+jk67AQg6hPWlFPeLVvQQzKxeflqynKQ69lurCIljyxdYw
WtCltgoD0dcRPxl71Z0Ne1nBjRJpE627A34FIsY3dZ+zlpk5TsTzLVQAHe5nwf0C
x90Oe9DdqTt2zdO00tmjB6gfAgMBAAGjggHSMIIBzjATBgorBgEEAdZ5AgQDAQH/
BAIFADBRBgNVHREESjBIgiBjZXJ0Zm9yc3NsMjQ3YXBpQS55dmVzLXJvY2hlci5k
ZYIkd3d3LmNlcnRmb3Jzc2wyNDdhcGlBLnl2ZXMtcm9jaGVyLmRlMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCww
KjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNV
HSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5l
bnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEF
BQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6
Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSC
onB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUD2BO6Y7chFSmDteATiKQJTLy
5jQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA1tvOWV6QHIP8HA+hw17q
B0llSW0GpTGS8loiTcBEonOj3Td91Ik4cU34KC0bYmvVE3xuvN9feFo9+24Eltaq
7BZ5le98K51MTL2Mg9uHOlKE5zrWHBWusU01+yqSuGPlj5ZxKVtlKDR/+Da7pxL0
rzlGNhY7oUHg2nbQaunMwc1CZHB0ik7RWAe5uUNyWfa+cTkjjI1P4BhvFkGMkoQ0
qvg5YQ31bYZIxUvjKmi99trJDQ//MFhbUXfE0OAFWkrjLPkU7K+uq2ddEwi9Tf6e
/V968bP2C3mwl+h1NBPqDGvaC7muLPJVpJFeM8iLWWDYIzrZNAVoTbe3+8ykYjQV
hQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2w/tguu4Sb4v1YRWVGW
VLWZH2UaJkCDVVUuG9lQu62zzQnJMWv0gnnbseDIZDPEi8bTds+4LODeg97+hQpi
qptVRQizny1Yaygi6ylGoV60Y7NejTgMvX8tusHJQv07AY6MUYxk39WesiFeVSIg
RGDkxHV330odUtZuW2K8R+Fd+112fz5dHPCHsVxb5zQKn0m+d5M9oQFdxWu/o5Ou
wEIOoT1pRT3i1b0EMysXn5aspykOvZbqwiJY8sXWMFrQpbYKA9HXET8Ze9WdDXtZ
wY0SaROtuwN+BSLGN3Wfs5aZOU7E8y1UAB3uZ8H9AsfdDnvQ3ak7ds3TtNLZoweo
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150631408879202619848982862750839784331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 09:17:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 09:47:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certforssl247apiA.yves-rocher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22650036096965324823373485587751941724133347052912575104134691702251174775644916650432264404851348206670583450396711253962937004685614236161716365107015743821870230949915785052504953708651751258944389186728750104073068723310461714836032537831293129902095063633707517808678132198375860174745025977150419266992057530485115288736751412235771912814831369326506652868720442260240034757307486782764157391460975870844060342819775421185485831872150098039633086110259369547639318025351049019615017588697250225083003832552754547085431066732469173637096997658513512067420198932555805296640238239949513728423672518906727599941663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certforssl247apiA.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certforssl247apiA.yves-rocher.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f604ee98edc8454a60ed7804e22902532f2e634
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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