Clifford Chance LLP

- Clifford Chance LLP -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 6f:b3:2f:fe:65:c5:9a:9e:73:9f:0a:83:d5:35:a4:97 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Clifford Chance LLP

Company registration number: OC323571
Organization: Clifford Chance LLP
Address: 10 Upper Bank St
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6f:b3:2f:fe:65:c5:9a:9e:73:9f:0a:83:d5:35:a4:97
Serial Number (int): 148474702098504920835256465672107304087
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 50:d9:2a:55:04:bd:83:81:bb:e8:c6:85:e3:43:6d:84:87:9b:c4:1a
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 90:6e:e1:81:72:5a:08:b3:93:8a:ff:f4:7e:f4:e8:9d:02:71:f9:92
Fingerprint (sha256): 10:1f:cc:61:5d:e8:e8:6d:06:33:92:d5:81:d1:6c:82:d5:61:4a:ca:b2:73:24:c7:ba:dc:9d:b8:f3:70:d7:bf

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Clifford Chance LLP

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Clifford Chance LLP

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cliffordchance.co.uk

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Clifford Chance LLP in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg996vYr8yGH7ow10uIS
NMehVy+1wJ1RcdC2Lh6g+HYhGRrrrtOGFP8wB75suoI6j4r6wnwXwfs/eL/odVI1
2Iqx9oH1qU0cgDYgtkwmFcx6XpMJ/ZDCl0AokF60UQIJTjc+AWabBPQHrDcfmAfZ
dSARv5Z3oJX4NLaebG/HDhXkq5d3XCU78RkZfiKAbOH4rhJZ2X6vgd8Zg9RMB1M9
1eGwzMhVFYjo+4meuA2myFJ3lr3jM2W3fAiknhUXLRe4QRNOfOae5j8JSuBd64Os
2UL2l7vM4s/XqIEqNyadZkZXQoohcMeuldcQ17sFOvKPt3dHfDUdqUwlALo7i5+E
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148474702098504920835256465672107304087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 12:01:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 12:01:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10 Upper Bank St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Clifford Chance LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OC323571'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00001307846'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Clifford Chance LLP'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24497870487497979111373251668539238213469866004130550004260538248299492527572020801973385638097533699332244144443725219100926608982976260023455995524576477043951749570732321108994271829739734962365764177009962351167217898370311257594257950571548719210097146202070816993412772258089747436634093949071171253635782697388535035283394018826215557102115906273639490068013067541939328936257168472847383409804015315135833130893582323103295551046203505797976679905509506721006741926512829909152632672668808151877032248391693696539398820598553484330365260353821864107265702270373006133504872999007181260376105679673659481883737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50d92a5504bd8381bbe8c685e3436d84879bc41a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1550 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															907114314de880b4f820f27c7013d1e3d6a37cfa06c1d1d514506f6459ab81d8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliffordchance.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00350301b1024baa044ba1ec680e76d7ff89201b8c28af5a2383582fdd0fd08b8248979eb8682dad33b3658fd945604fc484e659860dfde90cc30199b627116b89d13563d3ebf8ee257aae46fd4ac396db3893455e191765a603d3ef194324f96253cfcfe890eb0125da3f8452e51f99e1542e1aec2ed958ed0e6c6f1a5541ed5744585f07d9b18b84287781874ffc7c2dfd50394996253447ba54b5a7bcd014a546e9c923e74f9cb20db4a293cceb5f958b70fca78b5521337576cf4bdc5ea1896429c4cc8df6f53249a7f4a26ba774d433b8db65102ed74ccf7b59ced10a87aeae8846695de576dadee51ff0240ee60e927fa2b1c809c3299ed3c73b706a5da88212090ba4cc58e2cb18af09df0a3e53a14afb26d4e54949c91896bb8d273c9a6c9cb037cd34501106d2aca8f55942c941f57e9860fee391b3567d4c01627fa12ba028319561695da6f70f065a37e042e42dc29c5e7d91d1c261591a758ed5d53b690b44bb59bd03df70817095d02048d8a03a2123fdbf56f952469b8ec1c4503f4d67a093d73f3c516b022d6a01d76432c668f6d6c541aa022bca9e1d9ccbd7932631e0b90265bf59b944b22273f795e4e0865ef4f734526a5888a4f011e3a932bd6a2cef11b9747f77bc303f8cf1fe490bbf29dbc3c2a4b32bfa32a219478402271fe97ddc0ab85908efa4a3055c03316f44522d0552debaf407a5e703d280