TUI AG

- TUI AG -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 75:c5:c0:47:d4:7b:29:9d:14:bd:03:e0:94:39:24:ee was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

TUI AG

Company registration number: HRB 321
Organization: TUI AG
Address: Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 75:c5:c0:47:d4:7b:29:9d:14:bd:03:e0:94:39:24:ee
Serial Number (int): 156546457901569674278652026943971075310
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1b:ac:ac:b3:20:e2:ca:8c:6d:5e:37:0f:dd:0d:64:62:e9:dd:1b:70
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 30:b1:14:be:59:23:26:88:bd:7a:ad:64:21:48:4c:de:80:68:68:cd
Fingerprint (sha256): bb:52:4b:40:36:e1:e1:87:ab:e7:fb:e6:cb:ba:1d:1d:15:dd:01:29:36:24:63:3c:6a:c5:bb:51:ac:61:40:92

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate TUI AG

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TUI AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emails.tui.co.uk

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TUI AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogcNN4QSLJi81XzqMahq
kIv+Nqh+ab44yEtSPZFMJxtXWHINCp7ejMrvVmKn2CUWd8vepfOK3EGzMv4KcuLn
pCKahrhDtX2g0smdX0Ub0xRq3SAZQPV6uauuZaJzvWcxUdTdR4z5bxhu1mI2bTPF
ff0jTcMKJQSi9O4O9HGiWkB/jSvR+5N9G85vavwGQql6ZN987Ry6sQOE2HmYdz0R
28jNJ85pBCfeuy4NYopJfh4tpDaYbnKk/VMApM/Hn77i2ojDJMXAKuuY5XtQGiTj
EkyKsD8N0DGZPtGmmnguaeUkefPQQndx3goVsqKmANUBquhGFjRam9YAmVfpyhbY
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156546457901569674278652026943971075310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:51:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '302012020745'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Patent- und Markenamt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20454082692043847305203311857412975625157476894196052543572043601054200959937368680816600066978000741916467927428442277994467840888379295097801470300396099563833161203998343868152635284277454903888882047943195117404677286807222917268935108579113169670626376186971893997639918546422191975711390248357602884531696585960161477955187487773473862281780015522570572542786632208650167140261661893659021223273520579665504571686682207202589827025068167410880635782469135846320781196819042534624298535467202236715300340267245605819848971476803626311026031470668005417665377452421540185423451352964299244109960670931671242430713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bacacb320e2ca8c6d5e370fdd0d6462e9dd1b70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (826 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															323fda94ece45368ddc2c0100260b77267e2dfe2fd3eaffdfe3a65f2cb214c2e
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.tui.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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