Shopify Inc.

- Shopify Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this X.509 Certificate

This digital certificate with serial number 7e:75:ff:02:1e:4a:de:e0:fb:a6:17:4c:4a:06:b2:75 was issued on by Entrust, Inc..

This certificate is currently valid. We haven't checked the revocation status of this certificate, but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.

Shopify Inc.

Company registration number: 426160-7
Organization: Shopify Inc.
Address: 151 Oconnor St.
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 7e:75:ff:02:1e:4a:de:e0:fb:a6:17:4c:4a:06:b2:75
Serial Number (int): 168095398383628294343759450160937480821
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: dd:89:e6:ae:ca:8a:7a:44:be:46:46:db:fb:69:81:d9:ff:de:6d:2c
Authority Key Identifier: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (SHA-1): 27:8a:c0:50:20:ca:21:d9:15:4f:ce:fa:95:9a:95:e0:b6:ef:e2:ed
Fingerprint (SHA-256): 1e:6f:60:f6:83:df:19:f0:26:68:2a:cc:70:20:05:ef:f0:05:b5:cf:92:fe:5b:ba:38:6f:70:47:4c:77:bb:33

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation Information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Shopify Inc.
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for Shopify Inc.

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Extended Key Usages
Extensions
11
CA Certificate
This is not a CA certificate

Subject Alternative Names

shopify.com

X.509 Certificate

The complete raw X.509 certificate details for Shopify Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiasUGFtrhhRUgvaOXZh
4+y85P8OWl0AwSGMtplHEXG9a9vYu7MK60UB730YwgztjhA3mJCnn3ez2Lo+DHKT
KQJOf9h2iFpqyVs317k6YKtB/K6h13gZPY1VRUKssRcbSCjV5DpB6cp7QVQsSPup
xyYSzBWTku7VXrkAKvgBTrNFEWCcRsjg/fjO3/g2mRbPIdhE00zu9G/M9DDQqBun
qx5eiXZSQDAWt5elW8qE22ML4hK7a9krw+ATdHcR1kquUHJLxAsAB75mgG1cmT35
viF5xici3O59gzolMpmrNb+Vh1wKh8nDAlcaOrZ5XKym9rJk2u1M3iaEA1N0wvWX
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168095398383628294343759450160937480821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 21:00:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 21:00:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '151 Oconnor St.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '426160-7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA963086'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25519208020262756392780822041974871705479329998071273522392952540022611764696375906599766026992659587849769437698838602068617690765041436481162372087033136606057572791867844905563666132356108946628786059368655118146335407841185083918201981909121423329220312145488588753779060353833903868001644452559684889797533076102544039947695362090374123095231611461994354072443898548127391269070221456467460058144593419925719090118559888329380440589818179546160248931535979715600341115028701945745464928000621231127455419310240648719190999469922011892557632218864861072320516438335579680022689691696577035280008652993067109160777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd89e6aeca8a7a44be4646dbfb6981d9ffde6d2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															aed9be8b5467437f8afd1bbcf526f2af74953eb46b588de0b5418bee89d57d60
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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