TUI AG

- TUI AG -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 75:c5:c0:47:d4:7b:29:9d:14:bd:03:e0:94:39:24:ee was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

TUI AG

Company registration number: HRB 321
Organization: TUI AG
Address: Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:c5:c0:47:d4:7b:29:9d:14:bd:03:e0:94:39:24:ee
Serial Number (int): 156546457901569674278652026943971075310
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1b:ac:ac:b3:20:e2:ca:8c:6d:5e:37:0f:dd:0d:64:62:e9:dd:1b:70
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 14:d9:e4:f6:c5:25:3d:44:23:e6:fc:c3:55:85:f1:d7:34:49:98:81
Fingerprint (sha256): a3:03:cd:44:25:1a:65:4f:a4:24:95:46:ab:3f:23:3e:38:11:f2:c8:e8:72:61:51:2c:04:d2:4d:e6:a5:d5:70

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate TUI AG

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TUI AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emails.tui.co.uk

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TUI AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogcNN4QSLJi81XzqMahq
kIv+Nqh+ab44yEtSPZFMJxtXWHINCp7ejMrvVmKn2CUWd8vepfOK3EGzMv4KcuLn
pCKahrhDtX2g0smdX0Ub0xRq3SAZQPV6uauuZaJzvWcxUdTdR4z5bxhu1mI2bTPF
ff0jTcMKJQSi9O4O9HGiWkB/jSvR+5N9G85vavwGQql6ZN987Ry6sQOE2HmYdz0R
28jNJ85pBCfeuy4NYopJfh4tpDaYbnKk/VMApM/Hn77i2ojDJMXAKuuY5XtQGiTj
EkyKsD8N0DGZPtGmmnguaeUkefPQQndx3goVsqKmANUBquhGFjRam9YAmVfpyhbY
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156546457901569674278652026943971075310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:51:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '302012020745'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Patent- und Markenamt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20454082692043847305203311857412975625157476894196052543572043601054200959937368680816600066978000741916467927428442277994467840888379295097801470300396099563833161203998343868152635284277454903888882047943195117404677286807222917268935108579113169670626376186971893997639918546422191975711390248357602884531696585960161477955187487773473862281780015522570572542786632208650167140261661893659021223273520579665504571686682207202589827025068167410880635782469135846320781196819042534624298535467202236715300340267245605819848971476803626311026031470668005417665377452421540185423451352964299244109960670931671242430713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bacacb320e2ca8c6d5e370fdd0d6462e9dd1b70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (826 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															323fda94ece45368ddc2c0100260b77267e2dfe2fd3eaffdfe3a65f2cb214c2e
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.tui.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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