NerdWallet, Inc.

- NerdWallet, Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 13:a4:84:16:61:c7:b6:45:67:0a:e0:25:e3:d6:e6:76 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

NerdWallet, Inc.

Company registration number: 4794644
Organization: NerdWallet, Inc.
Address: 55 Hawthorne St
State / Province: California
Locality: San Francisco
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 13:a4:84:16:61:c7:b6:45:67:0a:e0:25:e3:d6:e6:76
Serial Number (int): 26109547656061853592286723260928157302
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: d3:99:e5:bb:e9:ac:45:38:e3:2c:9e:0c:36:2a:32:b8:ee:aa:3a:69
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): ef:bc:9c:6f:7a:a4:0e:1e:c1:ba:2d:73:3f:57:6c:f5:19:8b:2c:89
Fingerprint (sha256): 55:78:28:eb:71:2c:20:d3:23:69:c5:9d:b2:15:ad:70:91:93:21:28:0f:92:d1:5e:71:42:d8:31:ca:1e:13:42

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate NerdWallet, Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for NerdWallet, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nerdwallet.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for NerdWallet, Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUxoNrl58hRFjzVBx004
lxbVJ2YI+5tN6zrFKPYoVJkRXJ1SiqXDQyQbVkkoOPCuzosQhfk6LhhNmG/JDkBv
4zEyt8rAD6XSIWJM3JYhoE/aHjafPej+6SK7dlaTIexPEtgy5+g0oOaR8vVlDWos
aihW6OBx3pTcZCe+RWQ5Cm7Lefk6HmB15gUqBtbF3JkS9wKuy2/4Dnd2Jj6Q8zD1
FBW8v2VqwRMa6iYS7n7VCsJokCKRt4/zvke88iifRups4LcxLT3EjRzsmhTYkCEV
ZSMazojuQe4k4ak2OjQjj+onh9iJiSwQ0s5e2iDyjGhF+W53NtRfTsrB3NxgFjYB
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26109547656061853592286723260928157302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 23:17:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 23:17:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55 Hawthorne St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NerdWallet, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4794644'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6898890'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NerdWallet, Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25411577036074529981091534812034407396461532633076974418003385722666864276889900176250195777768019463058869970671614159885786985291154071328981976102201378347403341157341291964644621848520781280683765171000192928045760472385794738503397986408539860644682713155938410466820591027359013448394145604612165327621779774174755365528688777340664062563799780150318563639267608858445057080693580479884080803128821382100496903204823830521006489957631483384057703683826599245288242166505040488401725412485842006896774313936055760840067445662981969261494538151022352130017750198073569330656167445298998955372462031263753945088269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d399e5bbe9ac4538e32c9e0c362a32b8eeaa3a69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (946 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															f32326cd05b4d9631cfe3cc31763cf64051adbad3218e3d9ca0126a6e234fd1e
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerdwallet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0066b9555742b2bb68d2867fb6e9d9fa25cfb75f3e3515a10463cdd05854f9c48bbb5f2a554dac731b330ddb14ebeeac80eb55959c86e559d0b01fe34a8b1ea2e30be44b4bbe03a0bedcfe5d829c070fb8fdd6a926cae8d76fbb315b5e8c25aaa99dafbea0d4c9b806b692682f1ab2c3230f208e93f3fa51b88d89a715a734abf53cfae9979d56fdb1d56e8d3c17d5365b4e9bd68eab05c600eb735fe864d44c93056e4455c5f6ae5a30f91cd06f9bf410c64f697266245cf9d63f767d82db3090470c5fb2df3ee29e09ebcb3bde4bb8d9a7fcd309a18b59f58d615a18cb7de83a836344266febffbd3417cd43e1b3610f6686637929d1e5de16abba78f44c87bc365cf862812996830718033b79efe94e5d931361e4a3759c139128a9d223251402b51a43babd69f1c3ba8e574be1714376fa86f53523fbeecc7b5de8dafb2d27eda034b004df05a7b09f7888fd12f7fce7f7c4f78767ffc698707efe604a52253e8bb8e12a10d287776fe45a4936dd3c58e7211d63515fc7a7467ac5ef7a153a783b8cfd30d333236187a021f8e9df9940ce0b2143a5e7622ee839b554d1ca49b051f59aff903600f75ecc83f27441254d703cddcbb37dd612c0d36c5ac788b74fd23115809ed64340e04226ba524c535ca08988a0fa3ac09e47bae8f719b78eda7d1c1c36d5dc103e313db6bf894124519942cd441c6d4fc16b833ef03d1a19