Shopify Inc.

- Shopify Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 28:66:a4:c6:db:56:61:4b:d1:08:ea:c1:eb:fd:31:8c was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Shopify Inc.

Company registration number: 426160-7
Organization: Shopify Inc.
Address: 151 Oconnor St.
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 28:66:a4:c6:db:56:61:4b:d1:08:ea:c1:eb:fd:31:8c
Serial Number (int): 53702076181200008272029383023610638732
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 04:d6:1c:bb:7b:b8:38:ea:3a:87:5d:3a:9b:65:cb:1d:d6:01:6c:02
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): bc:d7:d4:4e:dd:e5:ca:2f:29:1a:d9:08:28:b8:8e:d9:90:6c:eb:53
Fingerprint (sha256): 88:e5:50:2c:e6:92:2f:51:d8:82:44:9f:c7:f6:f3:03:b6:4d:a5:7f:eb:4b:5b:8f:f2:d8:c2:fd:42:73:96:00

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Shopify Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Shopify Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopify.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Shopify Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMjp/vUGVpy1asIv4g69
y5ePz4nt1iumYCiTbXC/NqBLbG6HWyyES/GpYzXcyclfR2rMeoTcJdXZ7UyHS1yY
qPTylVk+WbAUBri7gfCNsqzi8cU9Kf169fN3JM2I8QyIUttpsLdmjscdwj9r65+2
QytlgoJvrGZqDkrAqYJNIz5f+jmzdwTkVTRCFTqswRzlAwAQFBil2U7BG8lbOR0/
MDg4EP/x/6eDiT/Uz8EQP8HoYfvaxKMJS9xtJCLsWuE+5qNgyTaNzb05Mt+7FOd8
A7rAeQzlpixgznCEG5YNCAMx6aBTteZAGMUiWFE023m3PDf5TDXu6y+NFZ9j+KUu
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53702076181200008272029383023610638732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 22:03:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 22:03:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '151 Oconnor St.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '426160-7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA963086'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shopify Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25851688622001814840566686207721283451793232630178715971616073675002897870891649180932605697719632121874979033611816373995199870060822658869624786670807356590060813073837762291439794786351374425274700455479886570743635452118591214700649160007431852526098564994027316430991921554125015243247705673079732603601976476609053834357719040723100158173911993580201790476532917128379541449114559113017937987974415683190769500508087138967203669008965284355048229075399540009630043172886871350832113917618650878600747377690644386584994119406823205605334223268712786306366736016898358710871475312840978028733944660869909320117823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04d61cbb7bb838ea3a875d3a9b65cb1dd6016c02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															2a8716cb34fd1a5ae627ed17e23cfc1b9c4c17ecb483a1c58b102233259dcac4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0011128e0f035295d99ffae1d54fa5dfe7311dbcaab95554281c6553cad49abd8537e46de4b484b1600a142659704e3b8156c773abe56003068db12b96b38937f02bd7d4cc13056f1c77192893f94067444a6e8f796c93f01d66b762754da4df23ab938aa0a18ded6afca30a989248876e7fd2a24dbafa7904f86d8e81a0ecbb1ba2ecc4036cb0fb0da505dfc039b243e66a3cc934ef602474a800b558c523db5fe58c079287c6520e3938ef8c7b0a2589ef2ead10403604045e915c8286b42f8ddb7d692a3f2f496a0010ed0d56c6852b9bd5fa02faf5bad1a15de5dfcea93f80b353526403a2ec160c21162ee783e2f6b55eab2ba7544b93775f0823fac2706f50c90fbaef93ce859e05c2fb8042f746d36f4a36d1a5eede21d866f38c0f847f4bb1a4a8db911f2293e485aa9c19e3cd267cf59b44153cc94be8832d8e60700f28bc15e79f122199031bf23f67f2e05bd343bd23a901cc35830c32331b5b8d7e5527eb117f126c7c2306669b65154b14343cc5c6600f09462d639e552a02d3d4ceb81cb6a2d3132fbb4cbb1ec34bef8ae44bff8a680ecfb561bc9d2988fdba5cfcbe5a09b29b948f5c4c142c1c909d60583b7da71e68e043dabde3fd83adc0728e527f73b5b531ff319f5c94b86b76137f28f69a89c983d2d6584898685f5b7a7c0b6783f1f024b6850f9d48739d865bafa7840a80d1f31a92c1df7ca94b8e6d