Foundation for Individual Rights and Expression, Inc.

- Foundation for Individual Rights and Expression, Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 52:4e:c0:4d:59:01:00:58:5d:10:94:08:fc:67:d9:11 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Foundation for Individual Rights and Expression, Inc.

Company registration number: 000655204
Organization: Foundation for Individual Rights and Expression, Inc.
Address: 510 Walnut St
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 52:4e:c0:4d:59:01:00:58:5d:10:94:08:fc:67:d9:11
Serial Number (int): 109405595160086609282151777075389258001
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 08:6b:c8:13:4b:28:62:ee:48:d2:95:a9:84:80:9e:a8:dd:7b:cc:38
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 0b:6d:86:c7:09:9c:76:6d:e8:40:71:e1:e5:49:8a:fa:9d:6e:d0:78
Fingerprint (sha256): 72:9a:be:37:48:5e:b0:da:e4:4b:a6:c1:0e:68:a4:4a:37:3b:e5:df:07:d2:94:a5:27:46:0e:45:da:e7:a6:50

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Foundation for Individual Rights and Expression, Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Foundation for Individual Rights and Expression, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thefire.org

Certificate

The complete raw certificate details for Foundation for Individual Rights and Expression, Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rELwzM0BDDTuhBg4p+G
2kNFmq/7+Pw6TcX4iZaFuKCXj2IWANzXFgOWCilcQ1/ov3D172sm1bQ9dEC2jlGK
xTcCN72U3kdjov+DbFTSZf7DBIuxbQKcnR170RIG3+njawXprnlgGYqoEWYbcaS1
0lfdvmpTMKVzj+11MR4DiXhmhw3PPQKDB38MwNsSUwrIKlgrKS+553qnl9ZJ1Ez1
mkxMj/02p5WTujt/daz8y6ZO1ADw7IiRwgkqnpG70AZSlP2jj77aEQPHmDlR+7Yg
gz/JEnL0Bxbrv96wy8wCsieXxjzgsRnJr9IJ/eYO/Ra5zHazv962Yq1JSgfF3S5x
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109405595160086609282151777075389258001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 23:03:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-04 23:03:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '510 Walnut St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Foundation for Individual Rights and Expression, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '000655204'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7405956'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Foundation for Individual Rights and Expression, Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31646880851998822349373631257492856095933860989202900866624053699622059702982158300044708497069400062440577930968030780380675348136362329121260177900685970859397301986431706054790909980965609419752310594557015922809344760424802822125697843901719266938373145171950978921160417710546889275673565741034089748959725684996815352818389032716659665344332107323926770331174249254885971242851596112832750366291714395074372556931469437598336329948594814597212395272529007111968954662777965398511649779352989184838690845714128794087457559076029116486401274580427328539743758572533056193820241633278652746229323776903199429914937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							086bc8134b2862ee48d295a984809ea8dd7bcc38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (946 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															a2f94a1f2df312c6163095054f5505573fa72d669871db9a2c807786b839ef5b
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefire.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a9e97e2d78da45093d1f6cbaa77c4e7341eddc88e243804cb867f77b10b1615bcf17fc629800d556bd4520cb1e981eed882b831cb1adacfd12af121c2e6d55d58417c496c8620a9edbcf954b2ee42a9f2898f5075ee9b66232342919cc91cf7f4f06fc2ec84af2d92d95268a59be4b89ba6394f4159b4785f73c3f9acb9a857594a4d77c7dcdcecd3ae76003484f396d86dff0f3b91ab1fd3cd022ff045647d7cf2cae6b2807719f01e5de0ef17ba0b8afa5ee57d14d398588d444a7d474d43092f0fee601da37c19550fca2289853855eb2fa78ec6f2a171e3c5c9fe18cea7f40fa9bc73be973c6547b84365c7487368a4e6c60ebb3ff65526d7fd6c7182c4d2a7b593196e4388188f5cc0e87fc54c7acc23787afa394d4c99d28c4bd6f4558b6d6b734fd3ec435e2c9547e605bfdb67369802b11cb5df5979976cea182d56065daa63469492eec7f245460a6eb7a92bcf605bbd3d357f7a8c77036db8efcd496e906447eecbcd5c36e6f6e2f4645768dbe7d78a86451fc5f94f5bac2162f8e00ab55825df58b988ff240fd3b2f67638a7c43d6b0358403157cb362199ddf97db49a6575e7b7d831bda0f1b22604564fe4d5e8dc2284caf3227b5ddf6bb7290c3e62629cae98f6a88fb397c038ada6d865a7af5e0b00d4c09b1ca0c8982f1e734ba45ae6c6e45135ec8151af873a1250ab416959646b1197887e6612d7863d4