TUI AG
- TUI AG -
Issued by Entrust Verified Mark CA - VMC2
About this certificate
This digital certificate with serial number 62:f2:e0:cd:ef:78:6b:2f:c6:cf:6a:ac:ff:31:e8:16 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
TUI AG
Company registration number:
HRB 321
Organization: TUI AG
Organization: TUI AG
Address:
Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE
Locality: Hannover
Country: DE
Entrust, Inc.
Organization:
Entrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 62:f2:e0:cd:ef:78:6b:2f:c6:cf:6a:ac:ff:31:e8:16Serial Number (int): 131525439002324211849233294553454340118
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 65:b5:b2:b7:ad:be:e3:9f:d5:b8:23:90:72:84:89:48:4b:5e:7a:e0
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f
Fingerprint (sha1): 91:bb:6d:96:42:52:11:53:50:6c:4a:4b:90:35:83:67:40:5d:59:8a
Fingerprint (sha256): 93:c5:7c:58:5b:34:9d:d1:c7:52:2b:f0:9b:4f:d1:09:60:64:68:2e:b0:ee:51:64:0a:c3:62:ad:1e:f0:ae:98
Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/vmc2.crl
Check the revocation status for certificate TUI AG
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for TUI AG
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Extended Key Usages
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
update.firstchoice.co.uk
Other certificates including the domain name
(limited to 100 certificates)
Certificate
The complete raw certificate details for TUI AG in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIQaDCCDlCgAwIBAgIQYvLgze94ay/Gz2qs/zHoFjANBgkqhkiG9w0BAQ0FADBP MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yMjA4MzAxNjU4NTha Fw0yMzA4MzAxNjU4NTdaMIIBLTELMAkGA1UEBhMCREUxETAPBgNVBAcTCEhhbm5v dmVyMR4wHAYDVQQJExVLYXJsLVdpZWNoZXJ0LUFsbGVlIDQxEzARBgsrBgEEAYI3 PAIBAxMCREUxDzANBgNVBAoTBlRVSSBBRzEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdh bml6YXRpb24xEDAOBgNVBAUTB0hSQiAzMjExHzAdBgorBgEEAYOeXwENEw9SZWdp c3RlcmVkIE1hcmsxHTAbBgorBgEEAYOeXwEEEw1VSzAwODAxMzUxNTI4MRIwEAYK KwYBBAGDnl8BAxMCR0IxLzAtBgorBgEEAYOeXwECEx9VSyBJbnRlbGxlY3R1YWwg UHJvcGVydHkgT2ZmaWNlMQ8wDQYDVQQDEwZUVUkgQUcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDZ+b3vOfnSgWudcjA4e7V+MNi7yV8OlQ7dBfJuxWJX B+3L2k/9UwMjXtt1cksGYnlx+xonpsJoUvXG0ZU4UaJSHta/YjguZ/a209B42aRn adr47AgvxUIFDGiLSvVVWZgROjL/uCfUTRlNhWPUgB3xoDHuXDvZBvSG3k1Zorf9 HJmA2YrLoKxptHtH3srlNAfoWu20WKu89pJE3TBZa2z91YjuOZqG9PSEU5vubXK3 PfxYTphEnEk+HGx3KdKY4Ur+SYPMc6p8z7T4fmwJPxfXBrtY2T9JqW/WGhi6GVH5 0OiP3mqT1hx3hbxuQzlupU0ywK9cr53EAkTD1maXPFFrAgMBAAGjggteMIILWjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRltbK3rb7jn9W4I5ByhIlIS1564DAfBgNV HSMEGDAWgBTvvDy0rzrQRV52VN/HZHjpLR10PzBmBggrBgEFBQcBAQRaMFgwIwYI KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDEGCCsGAQUFBzAChiVo dHRwOi8vYWlhLmVudHJ1c3QubmV0L3ZtYzItY2hhaW4uY2VyMDAGA1UdHwQpMCcw JaAjoCGGH2h0dHA6Ly9jcmwuZW50cnVzdC5uZXQvdm1jMi5jcmwwgglEBggrBgEF BQcBDASCCTYwggkyooIJLqCCCSowggkmMIIJIjCCCR4WDWltYWdlL3N2Zyt4bWww MzAxMA0GCWCGSAFlAwQCAQUABCCDwsGqBIMuG4UljLIINFDxExfiUnNvMIUoCwIQ izqX+jCCCNYWggjSZGF0YTppbWFnZS9zdmcreG1sO2Jhc2U2NCxINHNJQUFBQUFB QUFBSDFYNzQ4VE54RDkzRXI5SDl6dHAwcjJ4dmI2MTZJN0VFUUZJWUdFMUpidnNC ZENwUFJ5eXVYdUtIODk4NTY5bTBPaUZVcHU0N1ZuNXIxNU0yTXVubjM1WjYvdU44 ZmIzZUg2c25POTdkVG1lanBjN2E2M2w5M2Q2Wk1wM2JPbnYveDg4YXN4NnRYbWVu UDhjRG9jbjZqblY0ZVBHL1Y2djcrN1BYRkorZGo3ZnREcXovZXYxQjlmYmc3SGsz cTN2OXVhMTllcTUrTDc2dVNKU3IyMTZzWGRibitsN085S0dRUDd0L2ZieDJINFRu MzhjTHQ1ZHp4ODJ1MDNsOTFwZC8ydnVibnRsSVI3Zlh2WmZUNmRicDZzVmc4UEQv M0QwQitPMjVXMzFxN0VTcWZ1ZDV1SEY0Y3ZsNTFWVnNreVBwMzRVT3JpdER2dE4w Ly8rdnUxZXY3cVlsVi9pZk90MmwxZGRwL3U5bnR6M0g3RTNwOHViajZjUGkvTGJ3 N2JRNmNrbFAxbDk5dExhME4rMlNsNTk5WkYxenZ0WE9yalpFSS9tcUVQeG5tVGVt ZThOYmxQa3l4RlkvdHNzbkhHMlQ0Wk9UTEoxMkM4YlBZbVltL3ZaWE81dDBxcHlj b1AzMmR0eFY3c2cyNHZwMEhPV25HWDVZQ1Y5Y1ZZa2Urb0hRd0Z5VUZ6TEN6S3Rp TEhCM21mOVVDUFpRcmM1blUwUlZiNVZxS0dZM2lWVnhLcWJFbHkzTWwrTENEY0lQ RUVHR0JjQWJBQnVnWVlqUk5BRXBrWVMzM1NZakhDbkFSRGswRkhpVlZNNnRLbnha V0F3WGxFS1M1SDQvZFdXeDRESUFSSjhxSnNqUks0Z0pEZlRvQ0E0S0RGckJrbE9N K0lBWEEwUW9MWFNJSVhZdWdJVGh5ZElQcVJxUkNXQUNsVjArQUJtZUVERUVWdDVY SFVBMWMxVjBrNHpTUU5Wc1NNcGhuc2lMSVpDNEFONzNyMjdtbzBjaUpwOEFJbXhz cG5KUFVEY1F3SVJLeVVtUURKWms5bHlOOFIzR2lQTThYZ0JGUXhNaitWekhXR3RZ d1VKUVNmNENsQktTbFVvVUVvWU1reDllQ0RtY3VrMllsUFpsb3owNTdBOEtwSXFC NVJBbGVZSkJiNUlSOG9DUndBWUFCTm9NWUxQbmxuTmFRSEdzQ0hNRUtWYXFqVTha UndvWUZMUksycGVERG9kWlhEcUNPenhGZW9uS1NSUHBFanhUZWJZbDZMWnZDd0JR S2Jad1BHb1NlR1RjRXcxb21LaGFLWVQ3T2dhbkJSVkJyNlhJaG9tbW5KSG5YakRi NXJrSklqY0p0aEthRVNvWG5QSXN2VVptVFNtYVdwMXJNRFBvU25tVkptdXdZYUVa c2VxQ1VxWVdvMTZ3UUJ1QTJtYVdldUhqRUJkQ1BxM3B0WmRKT2xabGlzRW5xVkpY UXFhcSttQVYvUHVyNHQ2Rmw2RVQ5WjV1blVTcDNGVXJ0U3BPNndCS2htcmpKeVhu K3h4cE9aQ3hNSkFyeUIwUSs2RlhLREhabXJTRnBIemZxZklEcnNIMWxTai9wRmxP Tk1EODQ0NU9QY1p5Q3NXcFlaNnRCemI0cjhMV2tTZjNwcFphM0hhVlRUeUU2N05N QzFpOVN5SzhoSlpHWmN4c3E1elg5VmI1MFhkZW9pUEUyZ1BpRW90dmFNWEl5b3BU aFpObXVQZ0ZydmdNQlJHckpCUjRZY1dUT0N2dkpibURoOGhwYUdWQnRNYmIyVzJV U3ZoMkNrSHdSMlFnZmRpdnRDVmNXSmJHTC93TC9vY2NoaklUNFB4eVd3WUJNa0FJ bWM4UWk0YkhXSnNKN3BTcElVU054QUQ0WWVMQ2NhSXpJdElzT0lQQXR2NURnTGZC RkVFRTArL01saDVwbGI1aDA4NmFwWjFEaHJGbEZMWXdFZEkzSmRkS3JqRGFHMmZO ZitHU2tXdE5XOHpzQmJzQ203K3BSMEEvTlZBaEJrbnZwQk5ScE1pWVNaeGY2VXpk bTRxUUY1NCthbTB3S3F0U1luQitLZjQyOEVNRitzd3U4d2g1WTk4cVJubmdKcjJt SEdpditaVnMrOWRjSkVOcDJ5emxTcUk1YUJIUWQ5Nm94RUVqYWlCWWRVeThSU2JU TUFQd09ZSFB2SXlINkNTZ3h0Q0tJcldGbk5WR05vdmNMeVpHcjVvQlhraFJLTjlN QSttWmhJYjVkQm16aXRxb0F6MjNpc2pCYk9MZ3pjZ2FjdzJ1SjZSTytPbzN5TktO a0lwaGMwcURQTEFZaWE1QmpYNTVyeWMwM1JzK09sWU9UbEFFcWRjUmpDTXdOTEw1 b1pOR3lZYW92NU1ETkxqRFRTRWU4K2FDa2lac3UybWxoWU5jdFpOd3pud3NVblVZ d045OXBaWUhHQnpjcFNZSUdONVF3TElCM2JqTFd0ZDdldWkvc1NyUlkwMkxvNDhH cUNnSEdwcTc3MThtOStya3poVE5EMUZsWDdTZUwwNGRXRHVSRVloVmVzeEZ0WS9u OWJrVVVlV2J6T29NcGp2ZC9nN3ByWTNTTFZVbVNPdUh0N3RnWWI5UmJXcmsyWWk2 WnRuT29hUmtNZEI3VDhvMURZSkhnOTlzeFc1SWdkMkNSci9LNm1SY0FXRHRNWjhI OGFtK285Qzg0OWJ6WXpyV3ZuaHFwS0RBTVFPV1pXM0pLcU40K2UxOHV6L3NIVDkz dVI4TWlaNU9kUjN2byt5OFh6WHNlUk1EV0ZPbE1uQ08vd25DQ3RzNDZZT0VXMjh4 TFVwazVyeFpFWkcxaHQ5UzZEVVZDcHNieU16eU5oeW5RdkFRWFNOdWhsa0ZoZTR0 aTlkT3RlRUIrR0pLZEhtRWVrcitOeWdmWG0wZlBYVHEzd1g2elZsdC95SDdTbjN3 Q2hTOUhjZEE0QUFBPT0wIwYDVR0RBBwwGoIYdXBkYXRlLmZpcnN0Y2hvaWNlLmNv LnVrMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDHzBQBgNVHSAE STBHMDcGCmCGSAGG+mwKAQswKTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50 cnVzdC5uZXQvcnBhMAwGCisGAQQBg55fAQEwgYsGCisGAQQB1nkCBAIEfQR7AHkA dwBVWVOuMJYAgGzS61IIpsmekxgorBBWtEIcVTYVTF91rAAAAYLvsR2+AAAEAwBI MEYCIQCf8vag1ONCwxc8cJpnGrwD/EvUXEL7xmX9ThXl5YF7tgIhANhwsMFCfaKF El75st32FvH282ltMN66Xv7gOeqMHlvxMA0GCSqGSIb3DQEBDQUAA4ICAQA4yut3 kB5yMG+Qg+QAu0dALy82qmbn7xyD9LpdN0ZAqlru3QA1yyZagOEJOXqY5ZDGit0i aIEMUfhk0/sAwewaCntTKwjSRyvxJa5a3AuvAIfCp7kuOfXDtMZi5VOAE/oZ0sMk cJ8yQ0bLdKc0KO50tCTGQjAP4mZSj1NMHOhKb2chDiESh7d5bDt1L9sSKOdn2Jid 2mZXtwKu3S8qeZ7csTKUXe9iMecw0iQo9679eudB5MPV71hc/2wCzQNjsEOWj1SY 81V9NQVNVRfWBtzE8+qgRSA8pnWEvJTb9YS6LJBFE7qux7BZVoITqhSxu1yOXYuK fTR39pTWM8qS0wlcgXpPJRs0XFkAfttdV0XWCa8HgZX7TPqEDSEUKC8TaNFjas5d MarUkJtNEk0HRzgPc7V4SqNCAGajP6JL/Ee/pqHdeEzKjlULNvoaliS89t1JvJKp Ib7DfCU9sE+rBrIh2JmnO3FJ88Hax/DRodK9aqKVwDtUqLEu53MlEfWZjL1/K447 abbb2UfJdN6d/ch1Waf0C4uT5c6lnEV0PIFTU+WQY73tmZAxI9hyQ3QmTfvQpgep s6aa2lqU0Qre+2Ba22IWIu1XHNDiXg+NdC/ZojLhyqMbShU46VchkYAKEGSEb0y2 RLFS5vEL86vvytq8mQceFYUPRNyf05/G8Nsd/g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fm97zn50oFrnXIwOHu1 fjDYu8lfDpUO3QXybsViVwfty9pP/VMDI17bdXJLBmJ5cfsaJ6bCaFL1xtGVOFGi Uh7Wv2I4Lmf2ttPQeNmkZ2na+OwIL8VCBQxoi0r1VVmYEToy/7gn1E0ZTYVj1IAd 8aAx7lw72Qb0ht5NWaK3/RyZgNmKy6CsabR7R97K5TQH6FrttFirvPaSRN0wWWts /dWI7jmahvT0hFOb7m1ytz38WE6YRJxJPhxsdynSmOFK/kmDzHOqfM+0+H5sCT8X 1wa7WNk/Salv1hoYuhlR+dDoj95qk9Ycd4W8bkM5bqVNMsCvXK+dxAJEw9ZmlzxR awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 131525439002324211849233294553454340118 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:58:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:58:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00801351528' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Intellectual Property Office' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27516864514035526726509037589230955751904411323643291181936178173767312598020390725388218047258581835940442558357116200802158726583529482500006298749251837701048681820554784658514072333169627484934745453810377943258803368470741032463917786439039936079694700333072129746833142017591599610512439306998946522933159129241417818701982762980735660983256942585340247891867548747386635067060307925884530539437386960592270032262738527792804366695023376135189939377833996394647723672805364249388809150476900319373624849311373564671901474124153533757098859744560936216090752124626831318509446364145659578453510418177013432734059 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65b5b2b7adbee39fd5b82390728489484b5e7ae0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2358 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) 83c2c1aa04832e1b85258cb2083450f11317e252736f3085280b02108b3a97fa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.firstchoice.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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