Josef Witt GmbH

- Josef Witt GmbH -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 59:1e:7b:9d:ed:54:cb:fe:55:ae:f5:08:66:2d:85:75 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Josef Witt GmbH

Company registration number: HRB 1435
Organization: Josef Witt GmbH
Address: Schillerstraße 4-12
Locality: Weiden i.d.OPf.
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 59:1e:7b:9d:ed:54:cb:fe:55:ae:f5:08:66:2d:85:75
Serial Number (int): 118459567779266781840807459907382904181
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3d:c0:e2:2b:9c:a1:4b:24:fd:d7:85:64:3c:c5:8c:ba:33:69:4e:75
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): c7:4b:0d:c3:71:02:c8:28:01:1d:61:96:64:9b:72:97:ee:fb:de:27
Fingerprint (sha256): 10:41:ce:d9:6d:2f:76:1f:3f:a0:ee:08:6f:74:17:92:67:42:be:04:7c:42:43:0e:a2:e2:f6:8f:38:f0:2f:3c

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Josef Witt GmbH

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Josef Witt GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

witt-weiden.ch

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Josef Witt GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILQTCCCSmgAwIBAgIQWR57ne1Uy/5VrvUIZi2FdTANBgkqhkiG9w0BAQ0FADBP
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf
RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yMzAzMzAxMjQ0MDha
Fw0yNDAzMzAxMjQ0MDhaMIIBTjELMAkGA1UEBhMCREUxGDAWBgNVBAcTD1dlaWRl
biBpLmQuT1BmLjEdMBsGA1UECQwUU2NoaWxsZXJzdHJhw59lIDQtMTIxEzARBgsr
BgEEAYI3PAIBAxMCREUxGDAWBgNVBAoTD0pvc2VmIFdpdHQgR21iSDEdMBsGA1UE
DxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUTCEhSQiAxNDM1MR8wHQYK
KwYBBAGDnl8BDRMPUmVnaXN0ZXJlZCBNYXJrMRkwFwYKKwYBBAGDnl8BBBMJMDAy
Mjc0ODQzMRIwEAYKKwYBBAGDnl8BAxMCRU0xOzA5BgorBgEEAYOeXwECEytFdXJv
cGVhbiBVbmlvbiBJbnRlbGxlY3R1YWwgUHJvcGVydHkgT2ZmaWNlMRgwFgYDVQQD
Ew9Kb3NlZiBXaXR0IEdtYkgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0lETLD/q14I28yGKZdJnIvcXsX7xcYAsxmTnuHV8b/CLM8d8o9INrMG6sVfpG
r1GKsBt6VLc7a35ep08eftcWdAkpEzJBa8ogU5L03icX/8bUT9EUF7IcZpdvP5RI
iLnWLMTHpn2LPkcJLZvBd7jWUwypjedDavO2+1mL8GzS368Zv4Fum99OdTYSLuRy
qik/DTLyP37dyxfweWdy2+D1RxABwW8z9muPF6AONk1ydTWBdQIwdYMgnn/cTucs
Wl6sGfGtpPuk0T5EwKXX/pSpw6FfrcWmk2j/pM24Hpn8W84J5dwM2z4LR5a+/f8I
yqvkVu5GCrwW59vj8y270zfZAgMBAAGjggYWMIIGEjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQ9wOIrnKFLJP3XhWQ8xYy6M2lOdTAfBgNVHSMEGDAWgBTvvDy0rzrQ
RV52VN/HZHjpLR10PzBmBggrBgEFBQcBAQRaMFgwIwYIKwYBBQUHMAGGF2h0dHA6
Ly9vY3NwLmVudHJ1c3QubmV0MDEGCCsGAQUFBzAChiVodHRwOi8vYWlhLmVudHJ1
c3QubmV0L3ZtYzItY2hhaW4uY2VyMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9j
cmwuZW50cnVzdC5uZXQvdm1jMi5jcmwwggQIBggrBgEFBQcBDASCA/owggP2ooID
8qCCA+4wggPqMIID5jCCA+IWDWltYWdlL3N2Zyt4bWwwMzAxMA0GCWCGSAFlAwQC
AQUABCB1eUhB59MoahSf7zPzoLM/F0AwbZt2DyxLqnEvulDSFzCCA5oWggOWZGF0
YTppbWFnZS9zdmcreG1sO2Jhc2U2NCxINHNJQUFBQUFBQUFBSDFVYlUvYk1CRCt6
S1Q5aDV2M1pVaU40N2ZFU2RXQ1lHT0ZTWk9Ra09CalZkcTBqUWh4bExoTjJhL2Yy
VWxMSjJCSmxYdDh2bnZ1dVV2YzBmbnV1WUJ0VmplNUtjZUVVMFlnSytkbWtaZXJN
ZG5ZWlpDUTg3UFBuMFpmZ2dBbVdablZNMnZxSVZ3c3pHTUdOMFd4YWF4M2dZaW9v
SElBZC9jVHVOcFZwclp3VzJ4V3dVMEoxRHZ2dXlKRGlDbGpjTG5KaXdXd1U0QWdj
UHpOZG5Vc1F4QjRuRFhaYlcyV2VaR05pYzNMbDZCcUNLRGNzaG51aXJ4OEdwTzF0
ZFV3RE51MnBhMmtwbDZGUEUzVDBPOFMyT1paZTJsMlk4S0FBV2RDK1VkUDhWNnlZ
SXlGS0lTZ0lJQ1J6VzJSbmYweVRiYUVoOXhhbUR3L1hvL0N6bzJTRjFrelAvdGVa
ek9iTGFETjdScnVuakk3WDlOUjZMY3daQVg1WWt6YTFqR2U5S3VidVNtbkYxVjFo
MVBMcGc4UGZ1OWtWSm5pWldWS0gzSTdzMnNDMkhreEpsOS9TQ1pFUXFBeWVXbFJO
eHQwM2V5Tjc0eDFCb0JBMlBGMXhTYTEyVlFFOEIyVnpkTFV6emhKQnd2VS9JMHJR
WVcvQmlCMVNrV1U0dSswMC9OVzBKUlBENXArWHJuN1ZaT09FcW9HZ3NZUXBacEdp
TFJIYXFBam1rSXNKZFhIVUtpWVN0Q0N1NndqN0VQODVSaWp3M3JmMVR1cXhNZXFG
STlwN0ZWMVNDdXFRRVdDcHNkUTRCZ2tSSXJSNUIvc1F5S3RuWElIL2RXdEhlWC9W
Y21QVlVtdStsazVGUGMxRldNSExRN0xkNG9nOFdzRjliWUNidjNtTWtVZW5rZ2F6
L0ZMQ1JUS2pUbE5BeTE2MUFSeFRKTUFSNXYwQ0NNRFJnVkc4OWk5czk2dThadFFX
NDRIVy92ZWtVL2pYQnkvZGpXa0d5bnlPWUQ1M0hzQzlOempkN1dXV0hrdG95Ny9r
SnA0aTRFZXpMRld0K2dNSmljK0dTdnpmVTEzT3oyaXQ4cjVjSVYvRWdNZCt4YlF6
b01ZV1FKOFUrankvZTdSdFIvSm44UEJDRmYrTUhxemYrS2hQL3NMUnBOL2lBc0ZB
QUE9MBkGA1UdEQQSMBCCDndpdHQtd2VpZGVuLmNoMA4GA1UdDwEB/wQEAwIHgDAT
BgNVHSUEDDAKBggrBgEFBQcDHzBQBgNVHSAESTBHMDcGCmCGSAGG+mwKAQswKTAn
BggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAwGCisGAQQB
g55fAQEwgYkGCisGAQQB1nkCBAIEewR5AHcAdQBVWVOuMJYAgGzS61IIpsmekxgo
rBBWtEIcVTYVTF91rAAAAYcyjALLAAAEAwBGMEQCIHEaUfsm+hXjCA2odt/regcD
MAmPof61qkmQtwTNlMUIAiBd861RkEIzRVNlLVwnY1upB6tKhbgC6hPV9dHNaTzl
qzANBgkqhkiG9w0BAQ0FAAOCAgEAk5Faz2TIHUwRxfk6rBCjAbrl+F1RBkOo4tRd
bksolHVKeGBayD/6IfwIGuLCN5It7nsttLYJu/bmEemRJiW3D6lpKPS40TiIZ1UW
f1iGiYnnKAegSg3OClZiaRtPVgWhCtlkyosKLSBh8M901bSUMI+rVG6NbzPNwz8l
8bm6/zCfeHdXKNvHePqx/9vglm4I/Dgl/LBV7oRQFO18u/BCini94qHxUq8QHr+8
9oTOPZVDNpZZn/cIlcnL/5G4c+4xYrROXhsHjGl+4IYVIQ1KMsVgDGpyhDe6UpRN
EbXbqM3309bxtJRT9dFNTWz9WLzUDTeMehMcJL3/qu6vCrNDNXTE85ldOELaWN5l
w4mX03WA7cf746P0fcFRfmASbExRgvRtnqq3wEnjGNPb4wNjK7XvYvWwbwiFoR8O
yWQ1+8FUFaifAIoTSfGgRlqXJzlYLqjeys8bT5Pp/AOgbA9Qe7JJrPYlP0Y3CLpF
C/IxYY2qS8oXu29xsYs/fYHkv49enFlrGPEKpfjM3m5vjRVk9zRHpNDaPa9QxCzw
q9N0qII1PRj39cZ+7NM5dIBaz1oo1eUkxJErgW8yJO7Wa+MWqiFjsvbZCNZDmlqU
RWPFCuCLfuwySH031Nk6Akb98z5/HbcLURQ93bwHO/JVldTNC1wHz1jcV4AcYTv3
waPyfvw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJREyw/6teCNvMhimXSZ
yL3F7F+8XGALMZk57h1fG/wizPHfKPSDazBurFX6Rq9RirAbelS3O2t+XqdPHn7X
FnQJKRMyQWvKIFOS9N4nF//G1E/RFBeyHGaXbz+USIi51izEx6Z9iz5HCS2bwXe4
1lMMqY3nQ2rztvtZi/Bs0t+vGb+BbpvfTnU2Ei7kcqopPw0y8j9+3csX8Hlnctvg
9UcQAcFvM/ZrjxegDjZNcnU1gXUCMHWDIJ5/3E7nLFperBnxraT7pNE+RMCl1/6U
qcOhX63FppNo/6TNuB6Z/FvOCeXcDNs+C0eWvv3/CMqr5FbuRgq8Fufb4/Mtu9M3
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118459567779266781840807459907382904181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 12:44:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 12:44:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Weiden i.d.OPf.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schillerstraße 4-12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Josef Witt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 1435'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '002274843'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Union Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Josef Witt GmbH'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22796008926439116312187978691674800215387998523362179805786847721412776218349946966296182288900502009079395455910432051817408042740635556869979307135285676660868099875874677121369332010051383174383412882841340407302929845577798089281034379007520149165251200626773053176872345134990922549918697312221823651809230085216395617345950559792799710397228170634514239738764278584975401620381122469338437173746276688699361451512199261334457909856467316637367394304786050042369870633524446062946850926480896303163359264989511809748645797449346809113341519757822386650409125445599492615426446986726480941275674591068037338839001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dc0e22b9ca14b24fdd785643cc58cba33694e75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1018 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															75794841e7d3286a149fef33f3a0b33f1740306d9b760f2c4baa712fba50d217
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witt-weiden.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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