TUI AG
- TUI AG -
Issued by Entrust Verified Mark CA - VMC2
About this certificate
This digital certificate with serial number 62:2d:c2:4d:43:c0:19:87:11:2b:18:de:d4:4b:ca:68 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
TUI AG
Company registration number:
HRB 321
Organization: TUI AG
Organization: TUI AG
Address:
Karl-Wiechert-Allee 4
Postal code: 30625
Locality: Hannover
Country: DE
Postal code: 30625
Locality: Hannover
Country: DE
Entrust, Inc.
Organization:
Entrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 62:2d:c2:4d:43:c0:19:87:11:2b:18:de:d4:4b:ca:68Serial Number (int): 130501937854555174776378964677912939112
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 6f:73:a1:09:9c:bc:92:09:34:2f:47:46:5e:58:6a:23:41:18:93:11
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f
Fingerprint (sha1): cb:e7:f7:26:94:fb:e8:22:bf:34:98:d1:12:3e:d3:61:d6:12:65:f1
Fingerprint (sha256): 06:22:c1:41:22:b1:b3:4b:00:4d:2c:90:6b:dc:00:b2:57:17:23:da:54:18:e1:f6:4e:76:53:a6:88:b3:7d:ec
Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/vmc2.crl
Check the revocation status for certificate TUI AG
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for TUI AG
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Extended Key Usages
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
info.firstchoice.co.uk
Other certificates including the domain name
(limited to 100 certificates)
Certificate
The complete raw certificate details for TUI AG in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIQ+zCCDuOgAwIBAgIQYi3CTUPAGYcRKxje1EvKaDANBgkqhkiG9w0BAQ0FADBP MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yMTA4MjQyMTA4MzJa Fw0yMjA4MjQyMTA4MzJaMIIBEzEOMAwGA1UEERMFMzA2MjUxCzAJBgNVBAYTAkRF MREwDwYDVQQHEwhIYW5ub3ZlcjEeMBwGA1UECRMVS2FybC1XaWVjaGVydC1BbGxl ZSA0MRMwEQYLKwYBBAGCNzwCAQMTAkRFMQ8wDQYDVQQKEwZUVUkgQUcxHTAbBgNV BA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYDVQQFEwdIUkIgMzIxMR0wGwYK KwYBBAGDnl8BBBMNVUswMDgwMTM1MTUyODESMBAGCisGAQQBg55fAQMTAkdCMSYw JAYKKwYBBAGDnl8BAhMWaHR0cHM6Ly93d3cuaXBvLmdvdi51azEPMA0GA1UEAxMG VFVJIEFHMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4DGOSVSGbEf N3glT1lXirhx5excdCRmZ4ktJIEUU2xS7ALuF12moO0iJZA1cwFPf7pzIFmH7NV/ YNmGEfWxWusNmn2uUJZ6MvEsVRR3pzGv9CZ2KCLsN6pRhHc1q8R3Rti7nofu6vmN mxGAr13cjQVhtolGP727dGrVxS/0Hhpw5m1C+SZID86AdY8+D10cYApJF0t9wAg/ JDnZdR62zu2Eqw5h7eqtQkT4YiMiP1I+1S2jyNKmQw9+th8LE1ajUcd/Mg61QQeM ZAgMnYzvuD2/eRyFUhv+bS74Ufk5M0t3hBTmA4ekygreYvkV4VBlHf1b0aOc7zYK JosB/M7qXQIDAQABo4IMCzCCDAcwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUb3Oh CZy8kgk0L0dGXlhqI0EYkxEwHwYDVR0jBBgwFoAU77w8tK860EVedlTfx2R46S0d dD8wZgYIKwYBBQUHAQEEWjBYMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRy dXN0Lm5ldDAxBggrBgEFBQcwAoYlaHR0cDovL2FpYS5lbnRydXN0Lm5ldC92bWMy LWNoYWluLmNlcjAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vY3JsLmVudHJ1c3Qu bmV0L3ZtYzIuY3JsMIIJ9AYIKwYBBQUHAQwEggnmMIIJ4qKCCd6gggnaMIIJ1jCC CdIwggnOFg1pbWFnZS9zdmcreG1sMDMwMTANBglghkgBZQMEAgEFAAQg/f9GEZRd etkwdJEIDlm77KkYd5iP95BtOC1jeVxjomEwggmGFoIJgmRhdGE6aW1hZ2Uvc3Zn K3htbDtiYXNlNjQsSDRzSUFBQUFBQUFBQUcxWFhZL2JOaEI4VG9IK0IxVjlLa0RL SkVWSzR1R2NJRG0wUWRBRUNOQWtyOEZGNS9pTStPeURwZnRJZm4xM1ppVTdoL2FD V0RJbExuZG5aMmZYNXk4ZWI3YkYvZW93YlBhN1pla3JWeGFyWGIrLzJ1eld5L0p1 L0dxNzhzWHpYMzg1LzgzYTR2VnF0enBjanZ2RFdmSHlhdjlsVmJ6WmJ1K0drVXRG U0ZXb2FsUDg4K2wxOGVmajdmNHdGdSszZDJ2N1psZFVYUHlraDV3VlRlVmM4ZXB1 czcwcTNCOUZZUzNzRC9mcm45MElaZkhsY2xpOVAreS9icmFyWlRsdWR0L3Q3VkFX NHU1dU9IdmNibmJmbHVYMU9ONmVMUllQRHcvVlExM3REK3VGenprditMUXM3amVy aDFmN3gyWHBDbGVFcnF1eWZrNUcvbTk3Y000dHhKVlNYQ3FLODNFemJsZlBQM3g4 VTN6OHUzaTd1ZG1NcTZ2emhhNkt6K3RpYzdVc1ArRHI4UG5sWWZ5eXZ6eGNZZXY1 WW4xNnZ0bEpYS1B0Yjc1Lys4K3oyNXZoN3ZqazJmbGgxWStGQkx4ZGxyLy9LYTUw cVN3ZU5sZmo5YktjUEw5ZWJkYlg0L0hyZ3R0ZzhObXo4OXZMOFpwV3Y5NXR0Mi8z Ni8zbjVuTTVtL3VMZjJVaGo5K0Z1cTJpOFcyc210NktIZHRVd1FaZmRkWUw4clp1 cXRyNnVzcTlqZkxWNlhxMFh0NzBXWjZGUXY1Nkc2ckdKbG1YSjA1VzVTS3ZiNTF4 dmJOaXZrcXdiWFM1YjJXenE3enhxZkppS1JpMTFNdkRKSlphRTFxNWFhdk9uSTRQ dUtrYUUrV1FXcmpWeU5iRXMvWGR4bVFZUzdJcHlrMlE5d2JyQTl6ME1GNkw5eDFp REJLdUUyK2orT081TlJvNXM3ZVpXeHNiNUttUk0ydGJPL0ZOTEtVNVJuRkl6TFJ5 ZktlR0kyS1F2WWtSTVhoWnIxckVLZnVyaGhESVRiUkJrTTN5WXFzSXlVZlQxOFE3 U3pBSlVUWUd5UGkyYW5sZ3hCZDV4YlJXQUdrWmN0MVZzWmVqQXJ5UmEwdlVFYUhB QlJlem1wL0JRSkwwVHRDUTFKcUVvN0tDMzhHU29FMEwzaVRZRVJjNkRkY0JJRW00 OFJNS2NNRFFBUVFlZ2JPKzBPTE5GamdnTTNFS1N0Q21MM2puaElOQkdpSnhCRVp5 MCtoeFVUWjFscHNDZkNUTGtpWW1UVWwwL0VCZW1PRkdlUWVlZ2pjZXViVE1wWGQ2 WjMwbnpqdW1IdzROOUZDQUlFc1FWZVRwa2pLRC96VlRIQmxwNmp1bVJvTDNRQUV3 Z0krR2ZJeXdxOHZnZHlhSFRSQ2VOb0l4NEdIc2Nqa1dBdWd2S0lJNnVxeUJBejJu U2ZMQTJrNldnRThDTlpIOWhMelkwL0VXK3VwSlk0QlpXL1hZNnB1Tm5UTnNuNFNK dzRYYkFlNGkxek1zUFNqZ1dGMlpQczVBWmxwb0RHb0NYSlI4a1h2aVdROENZcitV QTR2N21ERTlpbEVSaFV4bzUyd1RDeExCZ0NVSmoyYVdnQ0dBSEFSS0NMU3hKMjZ4 WUZFeDFJZld6bXprY2F4VVNRZjRuSmdSTXJrUFN1TGF6SUNZSS9rSDFJT1VUekxI R3VsUlVJSGJSVjNNWEZaT3E2b2oweEM3blV0Uk0rZ3BmSkFkdmpVWGNZKzh4Q2tn QWo4WC9veUJCZnFSS002QzBZTjgzWnluWkk0aXc2TXlsbG1QVHYzTzVpaFNwQjZl Z1RUZXpMcUdVc0NOMFZJd3N4SU84QTZWWUdlOXhBa1hJWkxzTFhBUGRlWTlhK0RV SjM0VTczeUdaOGhZUnRLOVlXbUtQM0pVdGtFeTBRTkNQZHBUWldyQUkySU54ZThN QW5GS0dzbWlLdXlBQU5oK3ByaFZucEFUY05Lek9jQmc2S25CRU4zZzVFMWJSNjBM S2xEREhTMHdSVEZSemZXQUM1OUpTUXFoejhUTGc0ckhjQ1MwampGTC9ocFdZTEJh Z1piMUY3VWR0VlJIcTU2MXpIL2cvNEJXSU5TUmJWRkE3dXdzWll3dldsSVR5RWpJ dlRjZ0ptU2tBVHJHaStDby9QZ3B6NTJnYVlpbUJzNEd4WkpwNU5wVjZTSzMyT2l4 TWRlRXJVTjNPc2J3QXdjWDczTE5NcEpua0ZQNFFESEZRZUwyZEFhYmdBcW5KNGJx bE9VUkVvczR4YkRuQUFhcUw4bnhVNVNzSVVjOVRjemJqQXgwQXFvZ0FpNkVPVUZa MDJ3cmhBMDZERkJyRUZ1SGdGcHdOMVA0V2hUcktSVHdzQmFvVFd3bkxYVTBNUWNS cGlCRWxDMVVRY1drMCt2UWtGcGFhZks5Snh3R1pjVjk2RkE5M01kb3d0WEE5czBl a09hNkQrQ3VWZDUyVUhXSDFRVGsyS0RSMkRFVlhNQlJPVWZZV3RlUXFBWkpPRHFQ U0JMV1VYMGtWekNuK2dsVC9jeWpsa0hUMTFsaGNuNlFnMW9PWjFOME1DSHd3bkhM N1lTQnJxRzVjRGxRZlRuaUNSZHh3MlFob3gxYWxaczZZeUk1UVQ2SU1tSzhnTFBD WE5MT3AwUjVvR3llZ2tCSURRVGVSMmdUeGoyZHVLS2hhZ0h0Q05LbEtVOWVKZHhy MjV1SExoRksvT080aUJZNjNlbG41VG1Wa242dDltcVNrMElMS1FqVU5zaHZxNE1y RmJwK2F2VWFsMmtHd1h3aDNNblU0bzZ1V0VvcmRiem1ZSVVyQjludUhqdjVBYnk5 MWU2SjdkbFNYUkZnbXZMbmRXano1bWgwOHNMUWkxTzArTWFCQUhiakpJZXRUdWJt RkFPYUJwbzdNRzUxRUprQ2YyTDNxVTB6aHdyQkRNeEZ6YUZuQmgzMGl1cSswVEE0 cW5TZm1NYTNQNlZVRWh6cWprTEt1ZHBQN0ltR0UrbWs2ejFKV0pPRURjdGlncnJq OUJEUk14cThMVkk1Tlk1SlNqbDRjRjRXclpQWEU0Y0dWS25XN1N6cytOVVFqUDVx SUJDblp1QTRnK2hrNTFsS0xLZXB6N0g5Wks1cG44c3k1NXdpK2pIL290TGZhTk9u L0I1OC9pK20zenIvS0E4QUFBPT0wIQYDVR0RBBowGIIWaW5mby5maXJzdGNob2lj ZS5jby51azAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAx8wUAYD VR0gBEkwRzA3BgpghkgBhvpsCgELMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3 LmVudHJ1c3QubmV0L3JwYTAMBgorBgEEAYOeXwEBMIGKBgorBgEEAdZ5AgQCBHwE egB4AHYAVVlTrjCWAIBs0utSCKbJnpMYKKwQVrRCHFU2FUxfdawAAAF7ef5KCQAA BAMARzBFAiBqCNxF/Onm16h52oP9jqMI5KMzxIVHDBvJydXIxeDSnwIhAPzeZwIh fr+1lwAsriSgCTlG1rHGzXXWat9I6B/Smu7PMA0GCSqGSIb3DQEBDQUAA4ICAQAf XPEJz9G2Ex/L8WmconijCTIrg6w8Pb1JQMxbh8d+snmQcy9B/IJMTogRcCHmPpnz QFT7FYlFgRTxdFYKc54GkyOjiXHXfOMtv7qsdtxm0LV41xKAI+Je6noBMmNE/FN+ PivpBTK8WxfM++iSzflVKh+g8y28qUDHBzru7tGPWf7ELkBweFm5bhZb7myupdYu bsgSy83kCOW63YMgK5mQa9pTXUUjVI117eAQIJ35J7rqZ4InQAgo/sS3wcSqyKp2 Zbwf83m9/HQF7oxPHp6PGhYDwo0asfAJoH67jXbnSyPnCf1Q4FjH//DdWTC1Wq6I As2Px8WaQYhASE8c9laayZBCB/mG2hXb3XUfVPy1zEcXOZPP2H9CFVZLRRzyOp82 UnWUQER+5vCuQvb3YQENOUuVLMXhU7n9QMoUqi1pmLNxTBeN6PqSNKTASyxNpzG9 v5uDej547CY19pCsHwhdNh6bxmMvfGf9WLiUui3UBYGVoNZ56UoQN2OSlV78mhJL wiPe+7E1uZus5HaKbgnjXEZ7u2c9ZxUEtTXNgOwNL6mmJ/lRtluQ+Mx6HBHaBOIQ 6wLxtShg4rCO5Qn8aDT0f5P07kGrPewvlpPwyThGOzYfw3GbU4FNVMhrJAhTwlWd TV4B9p3IFUmuRcovUzIo/zWCTQJdlyWdMVacQKKuyA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4DGOSVSGbEfN3glT1lX irhx5excdCRmZ4ktJIEUU2xS7ALuF12moO0iJZA1cwFPf7pzIFmH7NV/YNmGEfWx WusNmn2uUJZ6MvEsVRR3pzGv9CZ2KCLsN6pRhHc1q8R3Rti7nofu6vmNmxGAr13c jQVhtolGP727dGrVxS/0Hhpw5m1C+SZID86AdY8+D10cYApJF0t9wAg/JDnZdR62 zu2Eqw5h7eqtQkT4YiMiP1I+1S2jyNKmQw9+th8LE1ajUcd/Mg61QQeMZAgMnYzv uD2/eRyFUhv+bS74Ufk5M0t3hBTmA4ekygreYvkV4VBlHf1b0aOc7zYKJosB/M7q XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 130501937854555174776378964677912939112 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-24 21:08:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-24 21:08:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30625' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00801351528' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'https://www.ipo.gov.uk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21650251127912263564805425168637109696150250156034050887898530068089458215987923893724128172506034106067643497057773724058410536583806621864628438617135514932581219396681208322370973299660435562262854560733811933603462633553510675547108662400035911917086368578195048280599108273782219554948813319489537286116200605039662445245399247964045493481621016119910966755920870936529794137567412300489766548024176459557920929720865372092111235940458828752946174809802308901060967088446071847715414941703807270826965584874769830674996535528837762294155117043640724393297123476627687963124534918138430961870984675988727112067677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f73a1099cbc9209342f47465e586a2341189311 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2534 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) fdff4611945d7ad9307491080e59bbeca91877988ff7906d382d63795c63a261 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.firstchoice.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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