TUI AG

- TUI AG -

Issued by Entrust Verified Mark CA - VMC2

About this X.509 Certificate

This digital certificate with serial number 1f:41:19:e4:15:23:27:f6:89:be:4f:8a:ba:31:cd:3d was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser. It's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.

TUI AG

Company registration number: Berlin (Charlottenburg) HRB 321
Organization: TUI AG
Address: Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 1f:41:19:e4:15:23:27:f6:89:be:4f:8a:ba:31:cd:3d
Serial Number (int): 41544092295939986729954161738460024125
Serial Number Length: 125 bits, 16 octets

Subject Key Identifier: 74:b9:81:09:f4:63:3c:bd:0e:2d:07:73:02:4b:f4:e7:6e:67:9b:51
Authority Key Identifier: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (SHA-1): 5f:cf:f8:df:7a:d3:17:3a:4e:40:cd:8e:81:91:b4:e8:1e:ae:0b:a1
Fingerprint (SHA-256): 6b:25:72:4f:ab:4b:27:f9:14:50:b8:a6:6b:5f:86:3a:59:52:d1:d8:bc:98:7e:f8:f7:5b:a6:27:fa:78:15:9f

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation Information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate TUI AG
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for TUI AG

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Extended Key Usages
Extensions
11
CA Certificate
This is not a CA certificate

Subject Alternative Names

firstchoice.co.uk

X.509 Certificate

The complete raw X.509 certificate details for TUI AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99S5L98OBSEgMBuglobz
PViirHwq8Q1ylLUFobL7KG8q/kYRQDGVXtzu3LY9ZW9pJbNY2J4HXuo/td1p2akw
OXbdJfwNWmaLhLrzHEtfWTe1jvzHXchkIpMoDIlPbAg1ZD6aLJeJ6F648NI6vnJ2
swR4eyoFvZMuSSQhQtm9Kut2hNJmK3r0vRqXOpn0lbjdRZiSlnz8vcUu/90JT/cA
eC6de8CgBx/4XYifdWAwpRSC8SDfZ4V1dq7uKaPf8hq2XY5iWdA6GQNYwpwACFqb
B0k9ckEOYqWg7KM6rPb/RBxvIXCwq34a/BPuCxxfkdcwFrPgNEnOES3eFQexpiFq
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41544092295939986729954161738460024125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 12:33:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-30 12:33:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin (Charlottenburg) HRB 321'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00801351528'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31285759138197264104742628748116945404228467403358405708033725407445129971268443631440801695169548874440681563814063807403411786597813776176852489954566923466967572559535949816679975855446192806925952607250519515271712312370482413665722716037978752830840727616920318069109885791391492099412026335153630733944282350054536105986818823718389661979397596446794817698542954995491888096469765596027343625814921158961639500966572691976250066426341850105029905979277559524390023942892613204312756634725974983208029794734462867345224141722958956569485821049059632667779828855195557259403916611484588053421206797998204683119257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74b98109f4633cbd0e2d0773024bf4e76e679b51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															83c2c1aa04832e1b85258cb2083450f11317e252736f3085280b02108b3a97fa
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstchoice.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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