www.itesco.cz

- Tesco Stores CR a.s. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 5e:02:0d:93:e2:99:10:a8:9f:2a:91:1f:96:e6:b5:43 was issued on by Entrust, Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tesco Stores CR a.s.

Company registration number: 45308314
Organization: Tesco Stores CR a.s.
Locality: Praha 10
Country: CZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 5e:02:0d:93:e2:99:10:a8:9f:2a:91:1f:96:e6:b5:43
Serial Number (int): 124958091585492555315198955283211007299
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 26:f4:73:90:6b:e2:cc:40:55:48:a6:7a:d2:02:11:bf:eb:c6:5f:84
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): bf:fd:32:2d:55:47:ae:ad:d2:76:e5:cd:32:50:f5:9d:2c:06:d2:66
Fingerprint (sha256): 2c:64:bd:c5:07:43:59:c4:cd:4c:0a:7f:e1:d1:59:19:96:a5:ab:cb:68:f3:5a:bb:40:bc:39:ff:d9:2d:4a:99

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate www.itesco.cz

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.itesco.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.itesco.cz
itesco.cz
prihlaseni.itesco.cz
www.prihlaseni.itesco.cz
zabezpeceni.itesco.cz
www.moje.itesco.cz
www.moje-ppe.itesco.cz
www-ppe.itesco.cz
nakup.itesco.cz
moje.itesco.cz
moje-ppe.itesco.cz
m.zabezpeceni.itesco.cz
m.prihlaseni.itesco.cz

Other certificates including the domain name itesco.cz

(limited to 100 certificates)
soutez-pedigree.itesco.cz
service.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
*.itesco.cz
www.tescocommunityfund.eu
tescovalue.sk
enterprise1.ui.itesco.cz
tescovalue.sk
service.itesco.cz
tescovalue.sk
origin-www.itesco.cz
zabezpeceni.itesco.cz
pomahame.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
prihlaseni.itesco.cz
tescovalue.sk
www.click-and-collect.cz
enterprise1.ui.itesco.cz
enterprise1.ui.itesco.cz
*.itesco.cz
nws.itesco.cz
predsevzeti.itesco.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
clubcard.cz
m.nakup.itesco.cz
tescovalue.sk
vanoce2019.itesco.cz
zadostopujcku.itesco.cz
*.itesco.cz
soutez-pedigree.itesco.cz
card.tesco.com
enterprise1.ui.itesco.cz
nws.itesco.cz
corporate.itesco.cz
www.itesco.cz
*.itesco.cz
clubcard.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
www-ppe.itesco.cz
enterprise.ui.itesco.cz
www2.itesco.cz
tescovalue.sk
card.tesco.com
clubcard.cz
card.tesco.com
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
predsevzeti.itesco.cz
card.tesco.com
enterprise.ui.itesco.cz
enterprise.ui.itesco.cz
mimoni.itesco.cz
enterprise1.ui.itesco.cz
predsevzeti.itesco.cz
tescovalue.sk
tescovalue.sk
tescovalue.sk
tescovalue.sk
origin-zabezpeceni.itesco.cz
kariera.itesco.cz
card.tesco.com
prihlaseni.itesco.cz
prihlaseni.itesco.cz
www.tescocommunityfund.eu
www.tescocommunityfund.eu
prihlaseni.itesco.cz
link.homecredit.cz
soutez-pedigree.itesco.cz
vanoce2019.itesco.cz
predsevzeti.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
www.click-and-collect.cz
predsevzeti.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
prihlaseni.itesco.cz
clubcard.cz
vanoce2019.itesco.cz
enterprise.ui.itesco.cz
www.click-and-collect.cz
service.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
card-ppe.tesco.com
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
enterprise.ui.itesco.cz

Certificate

The complete raw certificate details for www.itesco.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobj3E7Aog9thIECDBjGE
QYehB7QFkPljT4cOZVWDYWqx4Tou9uWd2id1yfM6RIgTp3Sq0+RNJn3bGSyCGJAJ
8WYVB2fFqNaIzG0lz/8ZWfvEqwAPqH1CRLudHtFc0zNXdE+04js9D2FNY0F4wQkK
hB+ebT5L+5+HG2gekb0ZA8kNLbW8VfB+oLLZNMzh+s3hD3AfC3zA+Kzcb4MKrAW1
hrk23ZQ6N4pFhuO1meHUrVLRs2whk3bhfJF7T8CoqZzIrnHVJ7x6UDihk6y2fX07
BXyRifz8YIfnUqU0n3M5UT8jNynV3OUyr3HejzaO/ZXLrn3lEwxORebbU8nNGDox
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124958091585492555315198955283211007299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 14:29:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 14:29:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha 10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesco Stores CR a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45308314'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.itesco.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20415576811556629210930771548654555715181203052042452125018457984033004665442674453779306397478068751558855373617083016097248578762382015145950007655539451843583846230862827011092399837974360981344097349231622671390925957409793793920643270662010101931340200476261326362059628260614997976135380392005109224517945530942033897759294166727090379624828508609113274328112676439141395460195579704219442648534133125941809925571584916825587620176268383026483758113067714492336301471666536946173173165112258862435859682622126998661169720021454939017444382939433480000724763746301020679119318365984880363265304195690298143813993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26f473906be2cc405548a67ad20211bfebc65f84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prihlaseni.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prihlaseni.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zabezpeceni.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moje.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moje-ppe.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ppe.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakup.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moje.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moje-ppe.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zabezpeceni.itesco.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.prihlaseni.itesco.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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