Next Matter GmbH

- Next Matter GmbH -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 77:69:48:b9:c0:ab:b0:37:16:a9:7a:3e:d9:e6:62:c8 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Next Matter GmbH

Company registration number: HRB 195841
Organization: Next Matter GmbH
Address: Gormannstraße 14
Locality: Berlin
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 77:69:48:b9:c0:ab:b0:37:16:a9:7a:3e:d9:e6:62:c8
Serial Number (int): 158724797718881354189278955941529019080
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7c:9a:1f:d6:c2:b8:58:3c:2e:de:a8:54:f9:db:af:32:d2:41:4e:4e
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 42:43:99:e0:15:56:97:89:09:1c:01:89:60:29:7f:c7:47:49:2d:da
Fingerprint (sha256): 67:74:db:49:ce:7e:a2:1c:9c:b2:fe:c9:1f:48:d9:cc:8c:95:8c:f3:b4:01:07:c6:75:ca:f1:6b:67:29:6a:27

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Next Matter GmbH

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Next Matter GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextmatter.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Next Matter GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKpjCCCI6gAwIBAgIQd2lIucCrsDcWqXo+2eZiyDANBgkqhkiG9w0BAQ0FADBP
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf
RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yMjA4MTAxNDU5Mjha
Fw0yMzA4MTAxNDU5MjhaMIIBRjELMAkGA1UEBhMCREUxDzANBgNVBAcTBkJlcmxp
bjEaMBgGA1UECQwRR29ybWFubnN0cmHDn2UgMTQxEzARBgsrBgEEAYI3PAIBAxMC
REUxGTAXBgNVBAoTEE5leHQgTWF0dGVyIEdtYkgxHTAbBgNVBA8TFFByaXZhdGUg
T3JnYW5pemF0aW9uMRMwEQYDVQQFEwpIUkIgMTk1ODQxMR8wHQYKKwYBBAGDnl8B
DRMPUmVnaXN0ZXJlZCBNYXJrMRkwFwYKKwYBBAGDnl8BBBMJMDE3OTUzNTAxMRIw
EAYKKwYBBAGDnl8BAxMCRU0xOzA5BgorBgEEAYOeXwECEytFdXJvcGVhbiBVbmlv
biBJbnRlbGxlY3R1YWwgUHJvcGVydHkgT2ZmaWNlMRkwFwYDVQQDExBOZXh0IE1h
dHRlciBHbWJIMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGP4r1U
/d1UBan3iZDwWdLtSRz6FWgIHMxUMtcdHIzg2qx5nKla4spKEIOJumZKCWLFXxgU
8m0snwXb/vtLTwEw5DEDnsbBORDQPPcPgN+I5raDPAkqYH69MYFX4/DrVA/uwZaK
fbPd7orhS1jNQ6yXP46wEbyFsUCkRP7TP6zuQwEb6wG6Ae7WOSmrTvYMJpAEIPLK
XgD65IyscjyVhV/Vp2LY0g0HQ4KeCMXiXGpArGqt0ue2MdSwWFgR9+jU86BbFlbz
xs9/SqUu9r7jkpnWZKaQR+9icUnHZOsQRdR0KlVQGbOS7OBh7kUIf5X0pVT8Nu7S
D/dVWxiWebjt6QIDAQABo4IFgzCCBX8wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
fJof1sK4WDwu3qhU+duvMtJBTk4wHwYDVR0jBBgwFoAU77w8tK860EVedlTfx2R4
6S0ddD8wZgYIKwYBBQUHAQEEWjBYMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5l
bnRydXN0Lm5ldDAxBggrBgEFBQcwAoYlaHR0cDovL2FpYS5lbnRydXN0Lm5ldC92
bWMyLWNoYWluLmNlcjAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vY3JsLmVudHJ1
c3QubmV0L3ZtYzIuY3JsMIIDdAYIKwYBBQUHAQwEggNmMIIDYqKCA16gggNaMIID
VjCCA1IwggNOFg1pbWFnZS9zdmcreG1sMDMwMTANBglghkgBZQMEAgEFAAQguJFu
8vFhLXy/0m5uX+zjoYVpgQSkWzsyHjYouzVpavwwggMGFoIDAmRhdGE6aW1hZ2Uv
c3ZnK3htbDtiYXNlNjQsSDRzSUFBQUFBQUFBQUcyU2IyK2JNQkRHMzAvYWQ3aDVy
eWJaamcwWVRCUlNOVXZYVmxxbmFwUHlQZ1VuUWFNUWdmTm4rL1I3VE5TcDJvcGs3
amg4OS96dTdOblYrYm1obyt1SHVtc0xwcVZpNU5xeXErcDJXN0NEM3dqTHJ1YnYz
ODArQ0VHM3JuWDkybmY5bEs2cjdzblJmZE1jQmorR0tESXlrakduSDZ0YnVqbnZ1
OTdUWTNQWWl2dVc1QmhjWFVTbWxFcWxhSEdvbTRyVUp5SWhRdjNodUgyTkVURjZX
Zy91c2U4MmRlTUs1dXYybDlnUGpJRGJEZ1hiZWIrZlRpYW4wMG1lWXRuMTIwbWts
SnFnQ3FOajdVNkw3bHd3UlFwWWFWZ01Ha1F6WC92R3piKzVzNmVIdGZldXA5dm5w
N3ZaNUJJSFJ1V0djdjdkYmVzQlAxMUZhSzV5eit2K0ozVWIrajl2M0k2MC9kcnZD
S1JOd1Q1K0dSOUdWY0Vlb016Vm5UckM3ckJXNmplanliOEpKckY2dWJ3a1pEbG1h
UEVxUlNUdHVGS1ppa1FtUWl0cGd2TTVWVExsTnBFNU53blBOVDVndFZKSGs4bThW
TnpLaENPSmF5TTExNG0wbzdjenFiUkVaWXc4eFRPWmlaRDVVclEwVURLaEpDeTJH
NjVFcEdYeTlTL1FXK1IyZWIyNHNSZnlQSU9zTnBBRGdnWUYxMVpHWEdmeTR1MHlR
SlJtVklkcWpONGdIMHN0d0ZKZUd0VThFbG9ERFRkSmFQQTJBdnBHV0MwMTBFVkFU
Y01PTFViT0RFNEVlSVFOajJTT0VqblBVQkM2a1l4V0k4NWI0SHBoc3FWK0RhNUEw
U1RvbUNjUUIyZUVVY1I4SEdFTUxSV2NIQjFBTUdpWmNWb1lwc2lSQTdzTE9LWVVG
cFBUNGJ6Q3VZME9YaG5SYXBSNGdRazNkZjRIOEZDY2ZuMERBQUE9MBkGA1UdEQQS
MBCCDm5leHRtYXR0ZXIuY29tMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggr
BgEFBQcDHzBQBgNVHSAESTBHMDcGCmCGSAGG+mwKAQswKTAnBggrBgEFBQcCARYb
aHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAwGCisGAQQBg55fAQEwgYoGCisG
AQQB1nkCBAIEfAR6AHgAdgBVWVOuMJYAgGzS61IIpsmekxgorBBWtEIcVTYVTF91
rAAAAYKIRIaWAAAEAwBHMEUCIHPSmkALRnQegtFVpzF8ddoG6nQYcw7XsVwn5w0i
gfWOAiEAw5dJilNMjnTrOmmZrGzkHdKFMAV5Uf8+F3y2Qks3tZ8wDQYJKoZIhvcN
AQENBQADggIBAGAAoitnzChTR3AXjgebt/UKUpeuH4kchOqrq+/hRD6qqKb2lLbH
dECe5Dzf0ccpqvw0HY+pohGJ82/G91xGgNynDRYup0FO8jzE56XSX7SRfpNAo5US
pUsLb0bOmrzZUrnN1BYV7Vcv6p+Qi9XTFEuHMhN3gmT7Il9XEohWL6hiLrthPfVv
jdxIxlVrmpDyf1EebbTcm6ZcTASZqA50Wg81grRC4bVEqM2GVPnKl7opDW4F8Q/U
E5c13nDZvlgdOI4kfC0cGKda8QzjiBVTn0IDN5IBtPHUuWGzd7vJaFhsQEgMtIRl
cM6kftXKhmToTmFeII/7AZ0O5QPHf7eKrQ6c8/y5ewagpU86wb0iHf1Ley42NAwM
sDELIU8+mtJw1qz9H07bm45fIgiOrhz+B45r/hl4UOoblztWto+zWJx7egTbWGeo
g64fu0jobz59vc7aHXW4OOzDj3smmpHYb8QidQ0tLTSZI4vj2IZbSK0ymM8zCclR
JSEYN9ixPpRuUwie1xaEzY1QuzrSj0rbp2dJ89G4wn9Vcwu9oGiCOelS33TgbMx7
Zs4hrAhnBTWspS9PSGejUc2ZIBnsnoTCgiWjoLOlFWRp7sJzkIvFyrvQFgc84E8x
6QHoBX9UxrF2Qfpz9+pq6eQYZvlbSYDWxjcKsuHtqLJkJBj/KeFldFEc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGP4r1U/d1UBan3iZDw
WdLtSRz6FWgIHMxUMtcdHIzg2qx5nKla4spKEIOJumZKCWLFXxgU8m0snwXb/vtL
TwEw5DEDnsbBORDQPPcPgN+I5raDPAkqYH69MYFX4/DrVA/uwZaKfbPd7orhS1jN
Q6yXP46wEbyFsUCkRP7TP6zuQwEb6wG6Ae7WOSmrTvYMJpAEIPLKXgD65IyscjyV
hV/Vp2LY0g0HQ4KeCMXiXGpArGqt0ue2MdSwWFgR9+jU86BbFlbzxs9/SqUu9r7j
kpnWZKaQR+9icUnHZOsQRdR0KlVQGbOS7OBh7kUIf5X0pVT8Nu7SD/dVWxiWebjt
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158724797718881354189278955941529019080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 14:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 14:59:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gormannstraße 14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Next Matter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 195841'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '017953501'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Union Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Next Matter GmbH'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22313390680050889312563719189311256882033183113596813148535598859359368218468733202234917215617970324358584700913697411205791064461096691742404478452154425008012957254164128784598047629825725793588837294979859203239669180515494218820651262827710226067328928975344406938962133044495564112584096069501135924221993534790754308787117531672280338788961708905813001744365706477195628522578857009047378423552571439089086414570491935378370907725294198698098914352671905598788062690353359492728761220227726571321101105146280283771121616286042959666589963500886022149204125842528611317576761328878968923543203358763588804734441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c9a1fd6c2b8583c2edea854f9dbaf32d2414e4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (870 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															b8916ef2f1612d7cbfd26e6e5fece3a185698104a45b3b321e3628bb35696afc
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextmatter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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