TUI AG

- TUI AG -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 78:a5:5b:7b:2e:2c:cb:5b:78:4c:30:a7:95:8b:ef:e0 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

TUI AG

Company registration number: HRB 321
Organization: TUI AG
Address: Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 78:a5:5b:7b:2e:2c:cb:5b:78:4c:30:a7:95:8b:ef:e0
Serial Number (int): 160365943934476536379249489303418171360
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ec:df:87:e6:80:e9:ca:4b:bc:26:1d:6b:bf:93:91:52:6d:f8:f1:11
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 51:30:04:26:9c:37:cc:e3:79:6a:04:fa:2f:c3:59:b8:1d:d3:f9:63
Fingerprint (sha256): c2:3b:0e:f6:30:40:7c:2e:21:1f:00:1b:12:c2:c6:82:7c:ba:9e:d5:e4:98:b2:73:c7:2f:75:1f:cc:02:42:e0

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate TUI AG

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TUI AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tui.co.uk

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TUI AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPbdHwSjTgRcyPJcmTLU
l/Dr+tvo9txbW0vWlq9f33SAbp4Nbfzg2c2dyqY3aWY6g5Vv/AVHWrQnUfHoD1Fg
fnsXPhstRxgo9TFobwMdifg0hkmLeU25TGwBo2Z7HWEv+9/GSRfhIzvloIJkMcP2
LIZg4NwzUQNOqMSnAM2G9ziIiNLDjqurXB7MQF70VAm1rWpWY443DoyVbrkuswiN
/qigxsezJDcOQXfwS8SJ9/LjotVl3xtWSizhxmWIq8QGn6Nl00U/41D3Wkh3d9ZZ
ovK/UVChU4++qtjlE2vOjnsyyeEWaAJiCdkI15ziYGenrtux0iJh6G5B+roTtKOO
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160365943934476536379249489303418171360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:49:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:49:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '302012020745'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Patent- und Markenamt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21834721508583217856089990130533381522695425055446686408290475032463866840785560398688661928873109119894085225407360032739251825932344308402355026715231989706511328487476271511577390570589991164210629077972085460860445460113410379536906070836953066469911774120205482411500614372864149246487944671931686154243625129369171992608090984232142120546899197988996009946309803168135160764282842690574991152011084019424857457736869610607450065239936908021625479855431821159488346460484262608960815323695862183615803587047907974474646098110805705316724471306017298259672055460477974909448937463168225630826096654659748010102401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecdf87e680e9ca4bbc261d6bbf9391526df8f111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (826 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															323fda94ece45368ddc2c0100260b77267e2dfe2fd3eaffdfe3a65f2cb214c2e
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tui.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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