TUI AG

- TUI AG -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 41:ae:64:ad:2a:96:68:8e:bc:33:60:b3:50:f7:eb:dc was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

TUI AG

Company registration number: HRB 321
Organization: TUI AG
Address: Karl-Wiechert-Allee 4
Postal code: 30625
Locality: Hannover
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:ae:64:ad:2a:96:68:8e:bc:33:60:b3:50:f7:eb:dc
Serial Number (int): 87305321340017274925436417086460521436
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6a:5e:70:bd:e1:79:34:15:e6:ea:dc:b9:fe:2a:41:3e:e7:d0:18:72
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): eb:4c:bb:16:7a:3f:30:30:5e:30:d3:4b:b2:c3:b4:b1:d2:9b:a5:92
Fingerprint (sha256): 1a:b8:6d:3e:9a:75:e3:b6:3e:a7:77:54:bc:19:2e:4a:b4:93:59:95:d2:1c:0b:97:7e:1b:40:f6:ae:e8:bc:99

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate TUI AG

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TUI AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.firstchoice.co.uk

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TUI AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFQHzw6Ov9Q6dM0F8bk8
ErWS7ZEU+l3W+RpetkLfGH2CHr8ZVjg58i+56Sx0ojLLYim0UAhP7hwqF/NnES6C
S11RxRfdx1CckK/BT5vFtgaEEM3/eveW7uZxB8KpKkBjpOLLWm4MZShDC/2rfq7e
WFGZXivCea5P6z+JzCKXchJq37LyvXGkf7RNTfGIX897TW0DSpCfTpXiZSgkebaF
ZQt0pIL0Yie3LD+0XZoNof8Drmi3CL7VGmdB7O31b0UvLPQXv2KFLNLBGPae2WLa
d3BWPBqMwfxeTDvo7gtPkVDYAVWJY93MISBxrspdO1i5MJcUUXsoBEzBB2Jq7EkN
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87305321340017274925436417086460521436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-24 21:16:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-24 21:16:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30625'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00801351528'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'https://www.ipo.gov.uk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22259378659525444809010249641214872437091751278530116405263835397615122525300539785697612802000636241014123879422459122098052368890367357247607930033608448236481621555319113454892583623412640589117015932054645441300946612188711895454914369076767720800432119092857561906994063484563383259528999422258540362673750023677359303927402798503838940074516209579467054392415830364801456662106274049374099083942215694750860934310155101082915785815053003498651780076591367310249308665996137958769297995077691359841699263785007552962486032175428018930074503420859385904131252292268246549323535519643593907283283374588769029655971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a5e70bde1793415e6eadcb9fe2a413ee7d01872
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2534 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															fdff4611945d7ad9307491080e59bbeca91877988ff7906d382d63795c63a261
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.firstchoice.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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