Josef Witt GmbH

- Josef Witt GmbH -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 46:e9:15:88:7e:fe:ef:7b:4d:60:48:8c:1d:85:d9:02 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Josef Witt GmbH

Company registration number: HRB 1435
Organization: Josef Witt GmbH
Address: Schillerstraße 4-12
Locality: Weiden i.d.OPf.
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 46:e9:15:88:7e:fe:ef:7b:4d:60:48:8c:1d:85:d9:02
Serial Number (int): 94256201617917813881528972965077965058
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3d:e3:60:46:25:4e:28:12:f2:8e:76:01:ae:34:9a:1e:29:57:44:b3
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): dc:b6:4a:a8:90:fb:8f:ac:39:43:d6:74:13:79:a2:08:76:bf:ef:83
Fingerprint (sha256): 55:57:bb:cf:4b:e0:2b:6a:62:8b:f2:f7:e6:f4:2e:71:0d:14:57:84:ff:4f:af:6c:0e:f8:6f:9c:71:9e:c6:91

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Josef Witt GmbH

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Josef Witt GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heine.ch

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Josef Witt GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cAxjXXAks7PUkzxN5U3
Y5Do6aRJcin/eO1Xh63Zos0mzNv1PYBbBXmSmld9L8bZtcUX2H/4N1CycuivGver
vbJkgSjYvBuheRiPYAgKhg2FfSaeZCUNRgHIVxNgFyUOnVl4atwlB6XIne8snVo0
Pkp/qXjQ1jDJtAn6E64ZmqkmZuPGMgTZo926M9LOCl+kD2o/JtlItrkJzqWny1BR
Op1rC01rbANZLEDImVbjatTvhSvXn/GMA+EiMg0Yx45+fVW/2CqiNouzDmEaRcVJ
ovTgTugvFGk5H4UZZVocEIqFf3XyRwzaLgbq3DKTGzHlFjyEkJE11XczM7wTTxPv
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94256201617917813881528972965077965058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-25 09:21:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 09:21:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Weiden i.d.OPf.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schillerstraße 4-12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Josef Witt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 1435'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018587216'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Union Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Josef Witt GmbH'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29508299236155775873279128318817411141182921465752882600482497797774074905986092737805349592874088537497936948240428125679722958103949813073050618471258245809167753532255361374880253335903783497720912378026171051157879378415018305527846063238263389819620141094773449487831838969015415673005515741203811614064497235403556246672264844257158783806575435981540323065106647985364935466637642047606867159657399493724743012600801622733467611978002622418440370984624062827246437300932897850370393473647701347499301460164544930105043594860016198753025020637998459841337636023385737440069182883620074189100830932533829315063791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3de36046254e2812f28e7601ae349a1e295744b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1694 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															40ab612256c83a1f7468b706ca0fd6acd51080ede86aa1b35847187a2319b7b0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heine.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005f3deb5dfe24987b1c1d165f9bb50f55932cfcbe0338172f061781ea64e840be8d406aeedfdf6590c06030a202d824d2aae4c6f3d1399c108fb7eb940f107c66a5a8d293724395419e7c0ece1dccb6915ea7d008fb0dc71069f66910ae1b0777512d9a98d9ad91d4973eb617792c0e12607ff565e3b077e5871a99b828f008416f87817cae9a0b40bdd89d2f23e9b3c1e5b3269379673bf6facd04e14fec6bdedfd4d6b2ea1861b6e3dc3ade1341602ceafe35bc9bc184197a6c88567581f9127374a077c97c3e108abf66d250cecc7db31d7e9e10cafb7cfc1226cf17e7265139a63d77621df83cbb6e15f749b19f2b4eac531de2ea6b8e612d0dd3f02727ed6e800d3349efb80f98c48da13caa45aa6b17a53367cc3455e04525546f19e023a80cc49174a8a7d34fd74d0fa9616a8f33513ab227870e6323ffa2d48ca611102f9e5b50088f55f116de02b3f13963415b8b466ca97f62ef0c8f6881ee8693cf363101b53cb6b8155ec27c0184ec6d7d03fb743d52d8cfb73645a0f3fa03348894a0617fdf0794e41abadc0f298215713e9a18670a01f4f4b734e6c45176c270ac5553dc2030c7aec064760de99ebe15ac9497b23941ede4c8f100ad559a752f4119105960e760883f8fcfb9af99f5cfb01f00c8b7b8335d0f386a321de87981bb538bd7465ed2a6c63b09130093e90dca5eae8c6f8697b9587386c131a65906