TUI AG
- TUI AG -
Issued by Entrust Verified Mark CA - VMC2
About this certificate
This digital certificate with serial number 78:a5:5b:7b:2e:2c:cb:5b:78:4c:30:a7:95:8b:ef:e0 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
TUI AG
Company registration number:
HRB 321
Organization: TUI AG
Organization: TUI AG
Address:
Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE
Locality: Hannover
Country: DE
Entrust, Inc.
Organization:
Entrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 78:a5:5b:7b:2e:2c:cb:5b:78:4c:30:a7:95:8b:ef:e0Serial Number (int): 160365943934476536379249489303418171360
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ec:df:87:e6:80:e9:ca:4b:bc:26:1d:6b:bf:93:91:52:6d:f8:f1:11
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f
Fingerprint (sha1): 51:30:04:26:9c:37:cc:e3:79:6a:04:fa:2f:c3:59:b8:1d:d3:f9:63
Fingerprint (sha256): c2:3b:0e:f6:30:40:7c:2e:21:1f:00:1b:12:c2:c6:82:7c:ba:9e:d5:e4:98:b2:73:c7:2f:75:1f:cc:02:42:e0
Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/vmc2.crl
Check the revocation status for certificate TUI AG
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for TUI AG
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Extended Key Usages
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tui.co.uk
Other certificates including the domain name
(limited to 100 certificates)
Certificate
The complete raw certificate details for TUI AG in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKWzCCCEOgAwIBAgIQeKVbey4sy1t4TDCnlYvv4DANBgkqhkiG9w0BAQ0FADBP MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yMjA4MzAxNjQ5MDNa Fw0yMzA4MzAxNjQ5MDNaMIIBLDELMAkGA1UEBhMCREUxETAPBgNVBAcTCEhhbm5v dmVyMR4wHAYDVQQJExVLYXJsLVdpZWNoZXJ0LUFsbGVlIDQxEzARBgsrBgEEAYI3 PAIBAxMCREUxDzANBgNVBAoTBlRVSSBBRzEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdh bml6YXRpb24xEDAOBgNVBAUTB0hSQiAzMjExHzAdBgorBgEEAYOeXwENEw9SZWdp c3RlcmVkIE1hcmsxHDAaBgorBgEEAYOeXwEEEwwzMDIwMTIwMjA3NDUxEjAQBgor BgEEAYOeXwEDEwJERTEvMC0GCisGAQQBg55fAQITH0RldXRzY2hlcyBQYXRlbnQt IHVuZCBNYXJrZW5hbXQxDzANBgNVBAMTBlRVSSBBRzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKz23R8Eo04EXMjyXJky1Jfw6/rb6PbcW1tL1pavX990 gG6eDW384NnNncqmN2lmOoOVb/wFR1q0J1Hx6A9RYH57Fz4bLUcYKPUxaG8DHYn4 NIZJi3lNuUxsAaNmex1hL/vfxkkX4SM75aCCZDHD9iyGYODcM1EDTqjEpwDNhvc4 iIjSw46rq1wezEBe9FQJta1qVmOONw6MlW65LrMIjf6ooMbHsyQ3DkF38EvEiffy 46LVZd8bVkos4cZliKvEBp+jZdNFP+NQ91pId3fWWaLyv1FQoVOPvqrY5RNrzo57 MsnhFmgCYgnZCNec4mBnp67bsdIiYehuQfq6E7SjjoECAwEAAaOCBVIwggVOMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFOzfh+aA6cpLvCYda7+TkVJt+PERMB8GA1Ud IwQYMBaAFO+8PLSvOtBFXnZU38dkeOktHXQ/MGYGCCsGAQUFBwEBBFowWDAjBggr BgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMQYIKwYBBQUHMAKGJWh0 dHA6Ly9haWEuZW50cnVzdC5uZXQvdm1jMi1jaGFpbi5jZXIwMAYDVR0fBCkwJzAl oCOgIYYfaHR0cDovL2NybC5lbnRydXN0Lm5ldC92bWMyLmNybDCCA0gGCCsGAQUF BwEMBIIDOjCCAzaiggMyoIIDLjCCAyowggMmMIIDIhYNaW1hZ2Uvc3ZnK3htbDAz MDEwDQYJYIZIAWUDBAIBBQAEIDI/2pTs5FNo3cLAEAJgt3Jn4t/i/T6v/f46ZfLL IUwuMIIC2haCAtZkYXRhOmltYWdlL3N2Zyt4bWw7YmFzZTY0LEg0c0lBQUFBQUFB QUFJV1NUVy9iTUF5Rzd3UDJIemp0TkVDaTllVVBCWEdLcHV1Q0FCbFFvRnZ2cWVQ R3hqdzdzSlU2M2E4ZjVhekxEZ1Yya1VtSzc4dUh0dWRYcDU4TlBKZjlVSGR0emhS S0JtVmJkTHU2M2VmczZKOUV4cTRXNzkvTlB3Z0JxN0l0KzYzditobGM3N3JIRXRa TmN4ejhWQUlkbzBiRDRmNWhCYmVuUTlkN3VHdU9lN0Z1QWFmaXczbklEQktVRXBi SHV0bUIvQVFnUlBBZm52Zi9ZbWdHajl1aHZPdTdwN29wYyticjlrVWNCZ2FFMnc2 elUxTzNQM0pXZVgrWVJkRTRqamdhN1BwOXBKeHowWFRMNExrdXgyVjN5cGtFQ1Rw ekdKL1BQeVp2eWJXVU1pSVVSa2dBYzEvN3BseDgrNzZHNjlVOE9tZkUycGVGaCtD TENZT1g4RFFNaUxQSjJjZFUzaXkvV0FaanZmTlZ6blNXb1dOUWxmVys4bi9US0xn Y3RyNTZWWDIyOGxhUmFwZXpyOVpoeHBXTU1hdGltbERFWFBJTVU2NHdvVEpxU3BJ aUpHbm80OHFnRVZObzBEVkN4ZWlvVlJkS2tTWTFkSkZKN3RKUVZTbXBWWVlXb0Vo UUMxSUVOeDFFNUczUmhaSXJIQ29ldmlWTnN6emxDZGMwdGhCR1U3dkxoTEtCUWtr YUtsU2kwQXB0VUcwSWxpQU5OWktPb01PdEpNc00xVGxRQnVER3VOQWxIVGxiTTgw SXdKZWROMitHdi83enpyUXhaQnZUYXNVRUxjT2F0RG1GVXhDT2UyMHRMZVpvbmFu YkpSTXBOWXR3VFp6MkhJU2prVndTclE0dmhTY0pXV2dkY01NSWZwbTJ1WVN2aU9I M1dmd0crQzYxQTFjREFBQT0wFAYDVR0RBA0wC4IJdHVpLmNvLnVrMA4GA1UdDwEB /wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDHzBQBgNVHSAESTBHMDcGCmCGSAGG +mwKAQswKTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBh MAwGCisGAQQBg55fAQEwgYoGCisGAQQB1nkCBAIEfAR6AHgAdgBVWVOuMJYAgGzS 61IIpsmekxgorBBWtEIcVTYVTF91rAAAAYLvqA05AAAEAwBHMEUCIQDKQI7O1sCK SRERm866m7QOGy8eA5QSQ8VBdT3vi564WAIgHsKW2ZJaXVZ4/UbV459x7kAyKARV 8iVMg7IXKIXUcFYwDQYJKoZIhvcNAQENBQADggIBAKbMvXr6QRbk5EwnLe3pc1hV BDLxNwTVE5sVTaPiQvUVGiyEadzi/xqAZcuCVI6WrmsX0V8vhOHHZxlQg+Kui+5I /tmzg42rZQpv5dW4H6hypT+Hz9BREWG7LaNQhEOXdbqQ5umzkDiMGEJKIy6buLho Atr0f/vgKM9dbEDODDrjQYgH1UxvPuC2DXtvCMlsu9JORyuwmAUXhQQsHL3m82CV +56H91/Z//x14NknEihKSuyHLp8Aw93NWQ5zrO4LulsSIeheimXbmQWodL5cbgpF r7xGWGuupKK+5iqzuKfEk28knTgkAM+k+QbxmH0ui1Do/LTcpckHvwVQxPCzZAB6 /nLOEMxSrWfmV5DbVCZxdYtq96y+S3MS89KIr+vt839UyHKcgcXTZwWS+n2U4Be3 RqeC/YmLNF6B5fOV6sUDLJtBAjrT+wlCsgaH7u3hJ7+MIidER2nNsd+afJqk4Syt BuFHUJ5EnT09s4H1I/Voj1TFpsrAepMRbVYhdTdrHXNnMVtwmJ6lypuzXGp5BUpv ZOtAax2TFeEdLmLd+MoX6dNRxte3DcvDEZr4r6Jn9XQkoVEvspiaf6r78fTfn0Xs gaUaDMd+b4jRUakIvu+uuweqjMYw5x4gW5IjFbQ10/5poKy2zuj/D/OZUup6AccK 462P4Eff5pxHVVcOOSQ4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPbdHwSjTgRcyPJcmTLU l/Dr+tvo9txbW0vWlq9f33SAbp4Nbfzg2c2dyqY3aWY6g5Vv/AVHWrQnUfHoD1Fg fnsXPhstRxgo9TFobwMdifg0hkmLeU25TGwBo2Z7HWEv+9/GSRfhIzvloIJkMcP2 LIZg4NwzUQNOqMSnAM2G9ziIiNLDjqurXB7MQF70VAm1rWpWY443DoyVbrkuswiN /qigxsezJDcOQXfwS8SJ9/LjotVl3xtWSizhxmWIq8QGn6Nl00U/41D3Wkh3d9ZZ ovK/UVChU4++qtjlE2vOjnsyyeEWaAJiCdkI15ziYGenrtux0iJh6G5B+roTtKOO gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 160365943934476536379249489303418171360 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:49:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:49:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '302012020745' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Patent- und Markenamt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21834721508583217856089990130533381522695425055446686408290475032463866840785560398688661928873109119894085225407360032739251825932344308402355026715231989706511328487476271511577390570589991164210629077972085460860445460113410379536906070836953066469911774120205482411500614372864149246487944671931686154243625129369171992608090984232142120546899197988996009946309803168135160764282842690574991152011084019424857457736869610607450065239936908021625479855431821159488346460484262608960815323695862183615803587047907974474646098110805705316724471306017298259672055460477974909448937463168225630826096654659748010102401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ecdf87e680e9ca4bbc261d6bbf9391526df8f111 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (826 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) 323fda94ece45368ddc2c0100260b77267e2dfe2fd3eaffdfe3a65f2cb214c2e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tui.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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