Guardian News & Media Limited

- Guardian News & Media Limited -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 5d:8d:ac:d7:45:77:18:a9:60:d3:2f:e2:b7:15:9d:6d was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Guardian News & Media Limited

Company registration number: 00908396
Organization: Guardian News & Media Limited
Address: Kings Place 90 York Way
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 5d:8d:ac:d7:45:77:18:a9:60:d3:2f:e2:b7:15:9d:6d
Serial Number (int): 124353823095055799841301618968369667437
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ca:53:5f:59:3a:87:90:1f:45:f2:b0:4f:f7:d3:a8:d5:dd:2d:df:d9
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 98:8c:48:2c:0e:3b:80:45:c0:6e:91:76:56:cb:9f:da:8c:39:56:70
Fingerprint (sha256): 15:5c:1e:48:20:55:0e:60:07:31:5a:eb:ba:a1:d2:82:c1:5e:e2:70:3c:93:26:10:9f:23:4a:6b:89:a2:82:eb

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Guardian News & Media Limited

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Guardian News & Media Limited

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

service.theguardian.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Guardian News & Media Limited in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtBX+uyvQm26wKoybBbb
J2Q4cVoqvzv72FYmCn9n4xZBrRWCL6VEDdU/GupWdDecez+fkcTDXOrlXEG2ygpt
pGcC5Q23FRQnBsS5NPL3KF4bCv8FrDuZQnKIwahypSDrynMow8S+CzQ2I6qQ4U+8
SOwEvOxuGmat7na0LJvdCsZRdzd9KKbEiBUpUBihiA56D2dY+p1FcYnBmwLJRJJH
Eqx16bb11pycoLhdRRp/V8wSwVFhEo8pHRryiLYNmrp9YZlaR9yxJSNN9r2mYPok
ODIjKO91xBju2eayeYnVjL00Z5h4y/4KlyxGkgcYm2y4l0w70tdKAF+Ill4ayMgt
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124353823095055799841301618968369667437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 15:33:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 15:33:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kings Place 90 York Way'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guardian News & Media Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00908396'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00917749102'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guardian News & Media Limited'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22068203158132158894075416171454076454810691628801483581517130994403105783775073120619851791734754699872859853548958898428086250934371810629532994134182396814985673655045671098253014010672531122888147857482610135836787201646598109939569340276469102989585482401449352463945227761084816398886859995871869902103399765197031879854530900555048826523009868577342357076266434586527436612093713593154105590432042932819932384702563139836035469226049564080498315276600476624818926759034837635892867977328936400462119779156829449541612792319689405379804795626024422926764966102220016486684554686104230613394360649442613856316759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca535f593a87901f45f2b04ff7d3a8d5dd2ddfd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (814 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															b45288710f4bb40b3bf6794ea2e39d557bcbb0f6f117844174417051b0fd8d11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.theguardian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00ab972ebccb89c819e909ab6c2254eee70803f0aa9d44f1534bd9df2b8ab4bcbaae93ade8bda1b9fd1fd5b8b2de45ef3d01b744e224c2deea59067c7fe087351e506c769c363053fff39666474aa439469766e58d050acea65c587e70d9ee248d445a0a33e5f7f9dfbdef7a118504372b8b12ba3f2373c21748910ea2a94e38f59953ee51198f3fbc249eab5e5bd919d824efb3dea23be85d38697c35287f9a8f53588afe952a61b9a8265e6f41e5883cc32b65744849a23866b03db0d05737ebe81340b4d8db25024673c2f4a5770a015265826473ff505f91c3d2f0c91ec0c5dd2e23cc99ed214a9066410148e33ed562993fe138b810a597984df215f750ccccf03e595a23bf22984beeb6bbc2ed5b874d5d89c1823e3606503c5fc2f525deacac90656396056b0b8ee5f58f029237fa69d9e32626a744ca32b376f7dc9c211018c0b9c3e6b6f1432f293bdad5f374c3ac7004306b7d6b2296792b0b456ec01a327f554c1c8089597b47008468869fafa95453f53bc029181de36289f18bcea203cd8d7201c2f83200b6c7e25566f19167015fc906b9632f237399b726fad895842b39f80d7880944769999b67e14a4b96c8fb95d227aaa33e9f02244791898c3f422e33d285171bbc6c1b3213e1b09c42bd1097d9aca8e26c7ab32c952b4fc9f6e4054f77d6b5ed06a6f2af1745c06810d7008cf4e2d7481bd5abaaec29be