NerdWallet, Inc.

- NerdWallet, Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 44:7d:ee:74:8d:f2:0d:26:ef:12:8b:29:76:7d:fe:fe was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

NerdWallet, Inc.

Company registration number: 4794644
Organization: NerdWallet, Inc.
Address: 55 Hawthorne St
State / Province: California
Locality: San Francisco
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 44:7d:ee:74:8d:f2:0d:26:ef:12:8b:29:76:7d:fe:fe
Serial Number (int): 91041377268573662105373184028787474174
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c2:32:c0:67:27:60:75:ee:af:c4:68:76:1e:01:9e:27:6e:61:c5:2d
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): c5:7c:2c:43:ab:ca:fb:ee:6d:a2:25:d3:31:0f:c6:3a:69:68:1e:bb
Fingerprint (sha256): 94:4f:7b:9b:42:9c:15:e0:cb:6e:54:43:dd:7a:ca:51:3e:92:5a:ed:d2:4d:47:7d:ce:b8:a9:9c:40:9a:36:0b

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate NerdWallet, Inc.

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for NerdWallet, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.nerdwallet.com
info.nerdwallet.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for NerdWallet, Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKyjCCCLKgAwIBAgIQRH3udI3yDSbvEospdn3+/jANBgkqhkiG9w0BAQ0FADBP
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf
RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yNDAxMjQyMjU3MzVa
Fw0yNTAxMjQyMjU3MzRaMIIBfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlm
b3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGDAWBgNVBAkTDzU1IEhhd3Ro
b3JuZSBTdDETMBEGCysGAQQBgjc8AgEDEwJVUzEZMBcGCysGAQQBgjc8AgECEwhE
ZWxhd2FyZTEZMBcGA1UEChMQTmVyZFdhbGxldCwgSW5jLjEdMBsGA1UEDxMUUHJp
dmF0ZSBPcmdhbml6YXRpb24xEDAOBgNVBAUTBzQ3OTQ2NDQxHzAdBgorBgEEAYOe
XwENEw9SZWdpc3RlcmVkIE1hcmsxFzAVBgorBgEEAYOeXwEEEwc2ODk4ODkwMRIw
EAYKKwYBBAGDnl8BAxMCVVMxQTA/BgorBgEEAYOeXwECEzFVbml0ZWQgU3RhdGVz
IFBhdGVudCBhbmQgVHJhZGVtYXJrIE9mZmljZSAoVVNQVE8pMRkwFwYDVQQDExBO
ZXJkV2FsbGV0LCBJbmMuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
031f47wwv/jDypuKe0gJAcoxK8ZmFEAGqDzd1LW9gY2hp0w66sczq6v5TVPpjfm4
j1Lrr+BjrLS2zYdwmV/7z3EJinDmA+O5lw2hsWBD+gXZUkb6ao0KfD26DdOtIbNc
LitbioLn7KYl14IpOiLlEEf9bZ9yW+ansBOWCq+zVS9Hz+N8WrMWSZCVuRneGYMs
V9qHGIM3hjqZAa533/3lhGodNAfmSDbhQvgQc6Cu9WKOVJ4aF6qb1UxxmeeMS8FL
0KQXIrv4bruEhVRlmTJFUuaogzNTBMbQIRZaY2IWIpX3B+ksPOQrWM0lRdZZ4Jzx
qTJHBdQtj99bfmFZOvV65wIDAQABo4IFcTCCBW0wDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUwjLAZydgde6vxGh2HgGeJ25hxS0wHwYDVR0jBBgwFoAU77w8tK860EVe
dlTfx2R46S0ddD8wZgYIKwYBBQUHAQEEWjBYMCMGCCsGAQUFBzABhhdodHRwOi8v
b2NzcC5lbnRydXN0Lm5ldDAxBggrBgEFBQcwAoYlaHR0cDovL2FpYS5lbnRydXN0
Lm5ldC92bWMyLWNoYWluLmNlcjAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vY3Js
LmVudHJ1c3QubmV0L3ZtYzIuY3JsMIIDwAYIKwYBBQUHAQwEggOyMIIDrqKCA6qg
ggOmMIIDojCCA54wggOaFg1pbWFnZS9zdmcreG1sMDMwMTANBglghkgBZQMEAgEF
AAQg8yMmzQW02WMc/jzDF2PPZAUa260yGOPZygEmpuI0/R4wggNSFoIDTmRhdGE6
aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRzSUFBQUFBQUFBLzgxVVhXL2FNQlI5N3FU
OWh6djNhWkx0MkU0Q0NTSlVCYW9PaVUyVkp2Rk9ReG9pZVFrS2dWQisvYTZkOE5H
dDdjVERwaUZkMzhTeDdybm5ubVA2TjdzZkdyWkp1YzZLUENLU0N3SkpIaGVMTEU4
anNxbWVXRUJ1Qmg4LzlEOHhCdmRKbnBUenFpaDdjTHNvSGhPWWFMMVpWM1lMbE04
VmR5bDhuOTNEM1c1VmxCVTg2RTNLSmpsd3V6bHJRSHJRNFVMQWNKUHBCWWpQQUl5
Wit1dHRldDZHSXZBNFh5Y1BaZkdVNlNRaVZaWS9zOVdhQUxhYnJ5T3lyS3BWejNI
cXV1YTF5NHN5ZFpRUXdzRXFCTFpaVWcrTFhVUUVDR3pMQmtFTWdINlZWVG9aZkV2
S1JUM1hPcWtvVFBLWTk1MW1IOXRJY2JscTFrTzY2cThLL1p3V09XQXJPaUo1a1Nj
RVZrV1dWOWhJR1BDQVNoODdoa3NlOFVmQWFXQ2Nmd3FIOWVmVnNpMStMY1R0blRj
bXNJaklWenp2VTYvRGc1Z0o3bU1vSnJuRTdHTHVtdnpGQzNrWTQxdElCWE81UnlX
ZU14bGo2d1U4bkI1cjdQODdlbDRYVzFOQ2NUOFd2RU5OWVB0VVVtV0lhTS9IRnhG
YmJvWVBNeDlOTnR5WUpYZXFzSDhMcmhPb1VRTm5PNk9teWEwVUhuY1JWR0psbkNx
MVQzaFhNR3RmTVY5TlQ0ZC9uOXRmbU5lTDBSMEJ6NWtFbzlIUVZVZGZ0S2RucUd4
bzNJSDlXMytJMWgrR0NmS2d2a0t5MHBDbGhxSXhTTkJNZUhxcXN2OGpvaEt1VWNa
QzJnbUttWFdlTU5aanJla09zV1JHdW5kZGVWYnZJdkNXRTByblcrRmtLeHhlQjVP
WGRoeXZPbWIySzlnTEVhL0hZaXpIN2dVNm5zdjBmcW1UbGVEMXh6Y1VQNzhxVWhp
MmFIY3J0dGRHaU5GRmtraTBzYlQyY1pPYUpUWmFONEhEd09sSUk0UFZibm9xZGho
SFkrM0Rpdi9aZzUrSEVCK1Rod1lBQUE9PTAzBgNVHREELDAqghNtYWlsLm5lcmR3
YWxsZXQuY29tghNpbmZvLm5lcmR3YWxsZXQuY29tMA4GA1UdDwEB/wQEAwIHgDAT
BgNVHSUEDDAKBggrBgEFBQcDHzBQBgNVHSAESTBHMDcGCmCGSAGG+mwKAQswKTAn
BggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAwGCisGAQQB
g55fAQEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQENBQADggIBAK5J
UO+Kxw4pVwY0txPY1j4pWdsVfZ/2UWICCs7Ry5rfo27zbisIPgsO1wEyLGSJvOeX
nLfM/e7akLNSVwAakSE2KP6zFxAI3agk6aFGxbireDrJ8a5m8Kb8HKkO2q5bzU5j
fH4BBHkd7g2etuEycqx7/PF5HdtU2SLjjNIFhftMxuzKXNQ7WKeFuWnG8TMwu+AF
1MFUUo1IO6WNncejsC4C/8DS+Vj8/0S28GNLHBHgB7/oMlwipM2j3e41iUZwrwOb
F57evRIp8r31syosGRXNYBJzemkDzOmidOuxVh+E7FTCznVWpIkXe4NL8JrVukoB
pK2btlPzS4OBW3WqHVGNEjz7m3eg/mKt0ga9bLDKm1r73q246b/co8X/D3J2XLgl
Ews+bWblnVL/aPmO2bQ/ZmwsQYR3ZoAJwo3U6xq+ylpFp6YDkMIqpV/rhYLgqF8Q
VYJ+l6a5H/hjFT7E7bdSB4UY3Q/uvFawl897WZ3MhK1skkOmgIf4pcQvdC5/Na1B
PwqU9hM20B1RaUxDSoTlo1DBcIKTO/QaYpau2QfsStc/lRWovvQvjpNL8F7vIjo2
PLr7N/1OUpl74gkSm0xmJCsNvS7aiktIdOw3z7L3g61LJ7WHJDOlbIFJHiElWdfC
zGAuzvok4dHzCFoLPs83U1P7YJt3Wo4am/ebIFwS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA031f47wwv/jDypuKe0gJ
AcoxK8ZmFEAGqDzd1LW9gY2hp0w66sczq6v5TVPpjfm4j1Lrr+BjrLS2zYdwmV/7
z3EJinDmA+O5lw2hsWBD+gXZUkb6ao0KfD26DdOtIbNcLitbioLn7KYl14IpOiLl
EEf9bZ9yW+ansBOWCq+zVS9Hz+N8WrMWSZCVuRneGYMsV9qHGIM3hjqZAa533/3l
hGodNAfmSDbhQvgQc6Cu9WKOVJ4aF6qb1UxxmeeMS8FL0KQXIrv4bruEhVRlmTJF
UuaogzNTBMbQIRZaY2IWIpX3B+ksPOQrWM0lRdZZ4JzxqTJHBdQtj99bfmFZOvV6
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91041377268573662105373184028787474174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 22:57:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 22:57:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55 Hawthorne St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NerdWallet, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4794644'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6898890'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NerdWallet, Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26698106851901147857974279427285770396106598130798164370706329531948352373353459568356613342927391191967111782770849259418414619895539307325276924505741254047062049363913467530510904080278654820205183138290010881169633661957433918475457141765781442032339518897325115099133058602422793595329168237649245410028027888560262285249513031326449144348066188692899389239136101193208823937951489358480684554026907423434010593852394418110927916715313619242611014164243600325080667529737656260785136087566090053348142510367999165274093733503686743193329025089696166397951676796365435638847135870160512835060435475426059669043943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c232c067276075eeafc468761e019e276e61c52d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (946 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															f32326cd05b4d9631cfe3cc31763cf64051adbad3218e3d9ca0126a6e234fd1e
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nerdwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.nerdwallet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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