Kiwi.com s.r.o.

- Kiwi.com s.r.o. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 70:c9:42:0a:35:ad:a2:39:69:cb:e2:4d:6c:a7:69:6e was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Kiwi.com s.r.o.

Company registration number: 29352886
Organization: Kiwi.com s.r.o.
Address: Lazaretní 925/9
Locality: Brno
Country: CZ

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 70:c9:42:0a:35:ad:a2:39:69:cb:e2:4d:6c:a7:69:6e
Serial Number (int): 149918526644404160041235069157620803950
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 76:4e:ed:96:90:4b:a6:26:31:f2:26:72:e1:e4:a3:32:cd:0e:f6:af
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 85:eb:9c:d7:f7:30:e6:51:41:56:1b:5d:42:01:9a:02:84:09:db:a0
Fingerprint (sha256): 17:f3:c6:83:dc:f8:55:9a:5d:b4:07:15:b5:92:83:7f:6a:72:76:85:37:09:73:f1:98:97:1e:00:f1:90:69:3a

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Kiwi.com s.r.o.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Kiwi.com s.r.o.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiwi.com

Other certificates including the domain name r.o

(limited to 100 certificates)

Certificate

The complete raw certificate details for Kiwi.com s.r.o. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotiH3RbrcLeoFswBmNbx
0iHm90o2VRtAWuO/1Gcw6Di15yoX3lRhJCceeYnjqhlG/GO77PWsq4HVxSpihYUi
5FRCKmbXkZW+CeiYQNjlbjSkKiaQJKK32yUXGcuiuDD5YlH6WJHitxyurIDrgh/7
dKzxme9u2dH/9SmEE8yNKu3835qF38mycTzsVUTIpxwlfhbh2zIswXBGNr8yjbMs
8B0/2arAAjzS0yT0FDj+UXxUag22whdscuRUTMPk9qg+Cnea3NBrHz8lU/XihKgF
a24b2qAIKzDLbiCa3sF1n8Nv5L600b1Gh+/l5R0kD869kMFdWn8TA1R6WF4B4FPW
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149918526644404160041235069157620803950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-22 07:37:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 07:37:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lazaretní 925/9'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kiwi.com s.r.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '29352886'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '015321938'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Union Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kiwi.com s.r.o.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20557380680775364752504597660706340605041155221162421430888279362646106059801147645280190489749054800684248416681488153948617818158608765590755276190813055227767325143350654387752387535328502820495336453691281929012436293497247847844022009102250439373014708303516155311977322514284068663223979007337038651712976879909560247958113085654310186821077671897225357587647660375884622590561886204527528885305917269502673208180882994146531198971931653525930071686646878312510756338126446235300875042446518711109364124312970031545038268965887284871733432970944926388224115834801421359291858947102580720032512198856785356117569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							764eed96904ba62631f22672e1e4a332cd0ef6af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1906 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															1a07b9005d93bcbcbe021feddec58388e2a63b897da7b9774fa300a891a55ac8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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