Expensify Inc.

- Expensify Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 29:84:ed:6f:72:cc:0d:4d:3b:be:1d:e4:6e:a4:b0:5b was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Expensify Inc.

Company registration number: 4682090
Organization: Expensify Inc.
Address: 401 SW 5th Ave
State / Province: Oregon
Locality: Portland
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 29:84:ed:6f:72:cc:0d:4d:3b:be:1d:e4:6e:a4:b0:5b
Serial Number (int): 55188546773438227367557267696931614811
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 7a:36:de:ad:b4:61:aa:86:af:6a:f0:29:dd:ca:ed:12:42:09:40:a3
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 05:56:63:6e:33:6c:a1:42:45:70:b9:3d:95:7b:de:51:45:c8:21:52
Fingerprint (sha256): af:a9:1f:4a:34:52:f9:bb:fa:b3:70:da:b6:db:43:b6:6e:89:24:d5:7b:15:7e:66:d2:50:ba:04:b2:17:36:4b

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Expensify Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Expensify Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expensify.com

Certificate

The complete raw certificate details for Expensify Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILazCCCVOgAwIBAgIQKYTtb3LMDU07vh3kbqSwWzANBgkqhkiG9w0BAQ0FADBP
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf
RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yNDA1MjMyMDQ2NDFa
Fw0yNTA1MjMyMDQ2NDBaMIIBYTELMAkGA1UEBhMCVVMxDzANBgNVBAgTBk9yZWdv
bjERMA8GA1UEBxMIUG9ydGxhbmQxFzAVBgNVBAkTDjQwMSBTVyA1dGggQXZlMRMw
EQYLKwYBBAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCERlbGF3YXJlMRcw
FQYDVQQKEw5FeHBlbnNpZnkgSW5jLjEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6
YXRpb24xEDAOBgNVBAUTBzQ2ODIwOTAxHzAdBgorBgEEAYOeXwENEw9SZWdpc3Rl
cmVkIE1hcmsxHDAaBgorBgEEAYOeXwEEEwwzMDIwMjQwMDIxMzcxEjAQBgorBgEE
AYOeXwEDEwJERTEvMC0GCisGAQQBg55fAQITH0RldXRzY2hlcyBQYXRlbnQtIHVu
ZCBNYXJrZW5hbXQxFzAVBgNVBAMTDkV4cGVuc2lmeSBJbmMuMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskqprfxx/Cj/7dEeI8WRXhgUKu92b7YUXeh+
0y+x9jPIT9uzzDS6xODGJBSosjb3fzHPbPZirOFFhw1+Mh43Z8scLn0ZjtuF/jg/
rcrZb/Q9mwmtwU3MIXGjjTkbd+ix4wPHqDJEYpSlz/O+HfeqiDQTFcwIekp3g90v
gjswBdxnj/4RWc5Rusu7pUT1UnvmjQmGgsGrxm6qcfjHqJGVr+fOl1NYVq3QlGxl
E3rTAoCprjXUKVSlwTJiVuwhJKemaojL5wZfV+F7qS+67F0PaJshtdr22axk2b5j
dTNC0plrKpoQmmzxYV6WkOsJDgOpd0cRHS8O2JVu23eMXtQXIwIDAQABo4IGLTCC
BikwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUejberbRhqoavavAp3crtEkIJQKMw
HwYDVR0jBBgwFoAU77w8tK860EVedlTfx2R46S0ddD8wZgYIKwYBBQUHAQEEWjBY
MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAxBggrBgEFBQcw
AoYlaHR0cDovL2FpYS5lbnRydXN0Lm5ldC92bWMyLWNoYWluLmNlcjAwBgNVHR8E
KTAnMCWgI6Ahhh9odHRwOi8vY3JsLmVudHJ1c3QubmV0L3ZtYzIuY3JsMIIEIAYI
KwYBBQUHAQwEggQSMIIEDqKCBAqgggQGMIIEAjCCA/4wggP6Fg1pbWFnZS9zdmcr
eG1sMDMwMTANBglghkgBZQMEAgEFAAQgRzFKjQ+zie8CMOUbLQjBQk3F1lW4XqaH
f4TrbdRIv8swggOyFoIDrmRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRzSUFB
QUFBQUFBLzQxVFhXdmJNQlI5SCt3LzNIbFBBMG5SbHkyNUpDMXJWdHJDQm9WQjNs
dkhUUXllSFdJbmFmZnJkNjZTdG5zWWRBK0tyNCtsZXo1ME03MTQrdFhTdnQ0T1Rk
L05NcU4wUm5WWDljdW1XODJ5M2Znb1kzWngvdkhEOUpPVWRGMTM5ZlorN0xkbjlI
WFpQOVIwMjdhN1lVd1EyYWkwMG9KK0xxN3A2bW5UYjBlNmEzY3JlZHVSU3VEaVNI
SkdoZEthTG5kTnV5VDloVWhLN2ovc1YzL0xzQms5M0EvMTNiWi9iTnA2bG8xTjl5
dzNRMGFRMncyemJEMk9tN1BKNUhBNHFJTlQvWFkxc1ZyckNicGt0Ry9xdzJYL05N
czBhVEpGV2hrNGlLWmpNN2IxT2VUVjNkQThQdE50VjZucDVJaEN4TGF1UmdKaE84
cythL2ZOaDNsR2gyWTVyaUVKUFdoZE42djFlSHFaOEluTi9iaCtQYUh0bFlYdzVT
ejdZYlJWUmhSR0ZYdHAzRTBlVkxrdnJDcHY4Q0Vod1N1N2lJWHlhMnRWdmdnbmhF
L2NwTU8vMzJHSUdnUTJxUGo5dGFvTWdoTmFXS084Y0NvWHRsU2xLSld2TEhBRElN
ZE8vaGlrVmpsUUkxbW1sYm5LZ1hnWmxDT2FHMTBvSjZ3VnBWTkJtS0FLa1RpNHFx
VHphS1FsM0lBZ0hwLzhVMmxoSExaNjlMY0ZFeG9WaFN2d3hhQ05CWndENWUyZ0Vh
QURYa29zQ1BEWUNra3lFRlZRVThxSUZ5aVhKcXFZQ3ZZeVo1Y2laNWZwSjczK0k0
ajNzak9PRlhtUVZ1QVBDQ0VIcWNXelFBUStoU05aUFphMGNCUVpFb1VxS3lRbEl1
UkhUaVpDQXhlWS9YS1FqbzBiV1hMc25uMXc0a2dlVDVlUzV4NmhTb2xqNWNqS2No
U0pMdkErZlV3TlpqbWxWRG1FTVRjZXlrUlJzQ0lYVWVZK2xTOHUvbXRXak1NVlZF
d1NjSDFXdzZ0anp6R2xIU3A1bE9xUmhHSEpFblpGU3VLa0dFbmtmRFpkSUJzMDNK
WjMyVFJmR2hYa3VsUU5GbnR4clpZaDNMSkpVK2psY1JRS2p2dDQ0Y3B4VUR3SGth
ZEFXcG1HRTBOb1dEU3lOS0k4cVJkdlJsNHM4MS8rL0E5RzZOUTV4Z1FBQUE9PTAY
BgNVHREEETAPgg1leHBlbnNpZnkuY29tMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUE
DDAKBggrBgEFBQcDHzBQBgNVHSAESTBHMDcGCmCGSAGG+mwKAQswKTAnBggrBgEF
BQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAwGCisGAQQBg55fAQEw
gYkGCisGAQQB1nkCBAIEewR5AHcAdQBVWVOuMJYAgGzS61IIpsmekxgorBBWtEIc
VTYVTF91rAAAAY+nNLxzAAAEAwBGMEQCIBMvOy5vbzl62+ZXGSc85ZAMutHfoFAP
0wpyAZ550G2kAiBm00BPUywEzwKiPQYITRsivNnIX8Kams3ug9PW2smRazANBgkq
hkiG9w0BAQ0FAAOCAgEAwxZxYtmNdLX4L0lqjxS6sgk2iKah1E886f0YYSrl8mAm
ba7k1eLGnEvGAgTnfhyWyhTiptbGWajosQq5kro+NrjaSjvbfL4KXi1X7Z9+gRoa
h6cRpdO8rD+xnxfrfNt7arckDH1Hu5zvoCX1yk0Ng6OwZVR/oARwpwTh3a1FKjuM
0SDcyZsswTgNVh3Z1ZsHPfpGJvj24AmaoTBrSHHhcbZEaTxATie2faQXpWokbwVr
tDF1R5yzlDe5Vfk0YmWITI87E8qfmU2QGvLqPh+Ud24gsS5mLu0qBXjQHZoq2K4w
KSKKBt8TqQXZ1AIiKcU7F6vpU2vnshQUWWud7vBvJg+svnvMHkHuFqCFXYh18cvR
xhT/efHnX0JcyagANuY0TgfOEFY+JLj73Dkr0us9qY6l4e7QeUqUrWhwyP0Io+FZ
LP+KL0pZ2j0qNfAuO2b5ePxVpjiR4QEy4XG8hcBAbsJa5KwM3UueX0ZSTZKXIu69
rul1ffWEgtYAaG+FhsfkevNS7Sn9qPo2to33q1ZakxsNmY/wxgQnAx+oYMEAnXGT
Mzib97OMadBByMKRN6A971eRfSJMdhjv0RXxSkolsiSe7NC2BBl6sxLVulJtYfBP
CUgEoiNcwuSi6sfLYlk390RS+j+GHvKlifFepwVv6GzSxbVaHBHQ9KlqzAAa2Pg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskqprfxx/Cj/7dEeI8WR
XhgUKu92b7YUXeh+0y+x9jPIT9uzzDS6xODGJBSosjb3fzHPbPZirOFFhw1+Mh43
Z8scLn0ZjtuF/jg/rcrZb/Q9mwmtwU3MIXGjjTkbd+ix4wPHqDJEYpSlz/O+Hfeq
iDQTFcwIekp3g90vgjswBdxnj/4RWc5Rusu7pUT1UnvmjQmGgsGrxm6qcfjHqJGV
r+fOl1NYVq3QlGxlE3rTAoCprjXUKVSlwTJiVuwhJKemaojL5wZfV+F7qS+67F0P
aJshtdr22axk2b5jdTNC0plrKpoQmmzxYV6WkOsJDgOpd0cRHS8O2JVu23eMXtQX
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55188546773438227367557267696931614811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 20:46:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 20:46:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '401 SW 5th Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expensify Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4682090'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '302024002137'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Patent- und Markenamt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expensify Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22507235888306684243739966953289137548169649381208205375074573009219324600726667023634099849254091363246953707628501553035326552870802507307897006153668730876227395724557715378142799837521054144109060565802110615741593392878470165939557446830526525817925254366073854905205854988686503851993968671267153276944354914670828285745270963047556355346308867312230729618315063205156947627977136224435986257227922250044840181083972559251051538480160880515496789674442469476507297906104521940136610682632889150047440783117787895545875929611254853917964231445265998572917154723137409982169844801104064101075228257744099336263459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a36deadb461aa86af6af029ddcaed12420940a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1042 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															47314a8d0fb389ef0230e51b2d08c1424dc5d655b85ea6877f84eb6dd448bfcb
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expensify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00c3167162d98d74b5f82f496a8f14bab2093688a6a1d44f3ce9fd18612ae5f260266daee4d5e2c69c4bc60204e77e1c96ca14e2a6d6c659a8e8b10ab992ba3e36b8da4a3bdb7cbe0a5e2d57ed9f7e811a1a87a711a5d3bcac3fb19f17eb7cdb7b6ab7240c7d47bb9cefa025f5ca4d0d83a3b065547fa00470a704e1ddad452a3b8cd120dcc99b2cc1380d561dd9d59b073dfa4626f8f6e0099aa1306b4871e171b644693c404e27b67da417a56a246f056bb43175479cb39437b955f9346265884c8f3b13ca9f994d901af2ea3e1f94776e20b12e662eed2a0578d01d9a2ad8ae3029228a06df13a905d9d4022229c53b17abe9536be7b21414596b9deef06f260facbe7bcc1e41ee16a0855d8875f1cbd1c614ff79f1e75f425cc9a80036e6344e07ce10563e24b8fbdc392bd2eb3da98ea5e1eed0794a94ad6870c8fd08a3e1592cff8a2f4a59da3d2a35f02e3b66f978fc55a63891e10132e171bc85c0406ec25ae4ac0cdd4b9e5f46524d929722eebdaee9757df58482d600686f8586c7e47af352ed29fda8fa36b68df7ab565a931b0d998ff0c60427031fa860c1009d719333389bf7b38c69d041c8c29137a03def57917d224c7618efd115f14a4a25b2249eecd0b604197ab312d5ba526d61f04f094804a2235cc2e4a2eac7cb625937f74452fa3f861ef2a589f15ea7056fe86cd2c5b55a1c11d0f4a96acc001ad8f8