epro-pl.bestbuybusiness.com

- Best Buy Co, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d2:e8:85 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Best Buy Co, Inc.

Organization: Best Buy Co, Inc.
Organization unit: Systems Operations
State / Province: Minnesota
Locality: Richfield
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d2:e8:85
Serial Number (int): 1355999365
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 67:10:63:27:36:b7:d1:6d:f6:a3:97:52:d9:82:f5:95:60:0e:85:d9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 35:1f:ad:f6:11:c5:05:86:cf:ea:26:82:5c:3f:9a:b7:ed:fd:82:4d
Fingerprint (sha256): fd:19:04:45:9b:67:d6:0b:31:bb:b6:65:c2:ff:10:ba:9f:4a:83:0a:38:ba:e8:a9:40:a6:14:ea:a4:ba:2c:25

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate epro-pl.bestbuybusiness.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epro-pl.bestbuybusiness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epro-pl.bestbuybusiness.com

Other certificates including the domain name bestbuybusiness.com

(limited to 100 certificates)
epro.bestbuybusiness.com
bestbuybusiness.com
epro-qa.bestbuybusiness.com
san2.bestbuy.com
www.bestbuybusiness.com
epro.bestbuybusiness.com
epro.bestbuybusiness.com
www.bestbuybusiness.com
www-st.bestbuybusiness.com
www.bestbuybusiness.com
apps-pl.bestbuybusiness.com
www.bestbuybusiness.com
www.bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
san2.bestbuy.com
www.bestbuybusiness.com
www.bestbuybusiness.com
www-qa.bestbuybusiness.com
www-dr.bestbuybusiness.com
www-st.bestbuybusiness.com
www-dr.bestbuybusiness.com
www.bestbuybusiness.com
epro.bestbuybusiness.com
epro-dr.bestbuybusiness.com
epro-dr.bestbuybusiness.com
www-st.bestbuybusiness.com
www-qa.bestbuybusiness.com
www.bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
epro-qa.bestbuybusiness.com
epro-pl.bestbuybusiness.com
epro.bestbuybusiness.com
bestbuybusiness.com
www.bestbuybusiness.com
epro-st.bestbuybusiness.com
epro.bestbuybusiness.com
epro-pl.bestbuybusiness.com
san2.bestbuy.com
epro.bestbuybusiness.com
san2.bestbuy.com
www.bestbuybusiness.com
epro.bestbuybusiness.com
www.bestbuybusiness.com
www-new.bestbuybusiness.com
epro-dr.bestbuybusiness.com
epro-st.bestbuybusiness.com
www-qa.bestbuybusiness.com
www-dr.bestbuybusiness.com
epro.bestbuybusiness.com
epro.bestbuybusiness.com
www.bestbuybusiness.com
pl2.bestbuy.com
epro-dr.bestbuybusiness.com
www.bestbuybusiness.com
epro-dr.bestbuybusiness.com
epro.bestbuybusiness.com
san2.bestbuy.com
epro.bestbuybusiness.com
www-dr.bestbuybusiness.com
pl2.bestbuy.com
epro.bestbuybusiness.com
www-st.bestbuybusiness.com
www.bestbuybusiness.com
epro-new.bestbuybusiness.com
epro-qa.bestbuybusiness.com
www-qa.bestbuybusiness.com
bestbuybusiness.com
bestbuybusiness.com
www-st.bestbuybusiness.com
epro.bestbuybusiness.com
www-dr.bestbuybusiness.com
epro-pl.bestbuybusiness.com
pl2.bestbuy.com

Certificate

The complete raw certificate details for epro-pl.bestbuybusiness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIEUNLohTANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50
cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs
IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz
dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNTAxMDcwOTA2NDZa
Fw0xNjAxMDgwMTQzNDJaMIGUMQswCQYDVQQGEwJVUzESMBAGA1UECBMJTWlubmVz
b3RhMRIwEAYDVQQHEwlSaWNoZmllbGQxGjAYBgNVBAoTEUJlc3QgQnV5IENvLCBJ
bmMuMRswGQYDVQQLExJTeXN0ZW1zIE9wZXJhdGlvbnMxJDAiBgNVBAMTG2Vwcm8t
cGwuYmVzdGJ1eWJ1c2luZXNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKIpLXcnW0XHoT+jhrCLXJSifOP4VfVWg6Vc8N/QkwQYfNjfjqV9Pw+b
6OmWUWQ2548FYJk14Mp7wlWEg7yD0S2OObE/DAYp/k6tFdKSENAHL22UcufKCUNO
URJGU9kiAhHT/r8cmEl+rUm3V7mxvPIFYALXoM7E/isP83prwUWNJ/q2zh+ZLxVN
umFDj62k8K7N8RyPhIU1KIYQlwq3PsoD40w/efDUPQbZ3C5v//DAdosgGcAAp1TJ
XckVPoub5dyDforucvNGFrno+N1BK+Nu3XURgpYnr3ldy0nrXXcwxApxhfY7gowO
VoBABgcihRUiVrQcskoJ+fu5U2noXlMCAwEAAaOCAY8wggGLMAsGA1UdDwQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCag
JIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBC
MDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0
Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYX
aHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEu
ZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAmBgNVHREEHzAdghtlcHJvLXBs
LmJlc3RidXlidXNpbmVzcy5jb20wHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+n
YMYKTL8wHQYDVR0OBBYEFGcQYyc2t9Ft9qOXUtmC9ZVgDoXZMAkGA1UdEwQCMAAw
DQYJKoZIhvcNAQELBQADggEBADQGKsM8v83zJydI+yQa6DTPK4nAJ0AyYu5DPero
EVJgr+OGQptFEGCNBPerKqmtFUqATDEbYU1irrgNxXcBDcYM7uJxQ4QNILUfBHeJ
46/nqc1rYQejX5G7yR6zg+EC5OFBMrbDSRQePxBVAyQfH5TPVP5ZEkZ1GEmZImeJ
rIrsN9HbWQyDPQIyIsTpX2f+ABHMl8KBFSFiC62lNps1JzK4iiMLJfJQXemTfRUJ
0HCD+HTPgfpEZ49rKneQjwYFzMX1cnPpwp/ETMFSgCTPLNEKcvXDVT3w3ytZGYNN
DqqrKF55BXQr5n/RGrSvz/VbkHPLCkoCFSM4msDNH9Zr+0E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiktdydbRcehP6OGsItc
lKJ84/hV9VaDpVzw39CTBBh82N+OpX0/D5vo6ZZRZDbnjwVgmTXgynvCVYSDvIPR
LY45sT8MBin+Tq0V0pIQ0AcvbZRy58oJQ05REkZT2SICEdP+vxyYSX6tSbdXubG8
8gVgAtegzsT+Kw/zemvBRY0n+rbOH5kvFU26YUOPraTwrs3xHI+EhTUohhCXCrc+
ygPjTD958NQ9BtncLm//8MB2iyAZwACnVMldyRU+i5vl3IN+iu5y80YWuej43UEr
427ddRGClieveV3LSetddzDECnGF9juCjA5WgEAGByKFFSJWtByySgn5+7lTaehe
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1355999365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-07 09:06:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-08 01:43:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Buy Co, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Systems Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epro-pl.bestbuybusiness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20470910835555338534574971170712806948179282267286698478661008883639543165319153334046886493264960516065343381047005326686886156139594770436667938127058692855559519172531533199191304607273872355589490464627819176379752280679263086002524056378611559132935290251847092001161918659241179245181096335372043854284452910482291008733616570757339165704442821638080954212773138600295873527419984817008355601903355716415522714044638784714936643842932951885846240356221378436982035850086363514126704104322185245471864984847161608518797710516843984541329814305473154543798469953817816837975449196848640740334771574805731467615827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epro-pl.bestbuybusiness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6710632736b7d16df6a39752d982f595600e85d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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