bunq B.V.

- bunq B.V. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 36:40:bc:d8:89:f0:61:c6:d8:d1:23:91:0a:f7:83:ec was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

bunq B.V.

Company registration number: 54992060
Organization: bunq B.V.
Address: Naritaweg 131
Locality: Amsterdam
Country: NL

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 36:40:bc:d8:89:f0:61:c6:d8:d1:23:91:0a:f7:83:ec
Serial Number (int): 72114449020310325980027413364431356908
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 41:4d:45:67:fb:6e:c8:95:a7:d2:73:f1:ff:f7:cd:ee:2d:b8:cc:8f
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 1b:dc:9b:76:8f:32:85:43:17:82:47:50:5e:da:fb:4e:a1:23:cf:52
Fingerprint (sha256): d0:52:3c:8d:2e:89:10:7b:78:35:36:03:50:25:90:af:04:b0:d9:d1:ff:23:06:4e:ab:d5:90:62:b2:e5:85:2b

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate bunq B.V.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bunq B.V.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bunq.com

Other certificates including the domain name bunq B.V

(limited to 100 certificates)

Certificate

The complete raw certificate details for bunq B.V. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMbX1AU76aGDvQwcs+KH
Q/3iZuCKGOeqHUDN7THY6yKZ/8yXjULSbAEfWeMY7QacKYfnckRQL8/rdWSxatZz
7EgtTF/ZIi4OOB2g7HyFJDiw9ues++zKnqu1Na37ljQTtk521o12yVEQ0SlWwi12
Avl+qOVZDW+yRCqFiZj2MmM0AvcIWlCGP4H8BMq4HBw6eb9iTpABLAVi7WU0pnTi
696QacRxvP4iNKMZ5Le/KKKIji9mfGQ6qe/5vGwA7UprDuoZLmf3OKXoJpoLvqIt
yfL+ZHkCgNf0x92dZg6q0znlP3uyO5AXOovoaylM2TiGQY0MnIPYxbpl0Cls6YNO
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72114449020310325980027413364431356908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 15:00:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 15:00:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naritaweg 131'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bunq B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '54992060'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018350240'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Union Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bunq B.V.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22315994850736302966723105634446675559323323414850866310532094604404940297469703836343927996469563081064294368065866167036766993389388176612858911334660114979019128197375686318795684520566055240013137883643873521068057094735674341717986444095213073975938443575718676296186949442231737274461514015197256648767378665943963902820110834574120874621214610099682054424927402372658295044249902313951405232265223511935555280535430087554248811204253520014453291096448999907826627246240905939847391525073084464927734114853476179962955347248494558120174049406120553664598928345656066009582679930359571325595902903864245602176531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							414d4567fb6ec895a7d273f1fff7cdee2db8cc8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															47cd4611883d557e05347031aa22fa29092768bb68a544966a3d5e6ce011eff4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAAAJ2VXW/aMBSGrzdp/8HLribZxh9x4iBoVaAtlVqpEhL3LaSAliWMhI/11+8c26HVRlWtSLbjE95znvM6gd754WdBdvmmXlVlP5JcRCQvZ9V8VS760bZ5YjY6P/vyufeVMXKdl/nmoak2XXIxrx5zclMU27pxIaIMV1xTMplek8vDuto05L7YLthNSbgLTn2RLkm4EGSwXRVzIr4Twhjmr3eL1xgqIo8PdX6/qZ5WRd6PmlX5m63riABuWXcPxar80Y+WTbPudjr7/Z7vNa82i47Msqzj7kZkt8r3g+rQjwQRRAo3QoJTUiWE6ABGBDiE9JpVU+Rnj9vyFxnwKSe9jo8A6/qhWRLgKvrRN6VtEqcRmfejO5nwlIqx2EGhJW6m4jkinX8kV9mglSgDAss1SsbKnBYkapDEV16gNZgsxpj9VZkxhk9JbTYcGu2lsXR4yrzDp0cDezHyGiOoT+4AjXhDobN4FDoy1gFisWOdWx88aYZN1WDopYn3z7xnoByZoY29JkUDTetg+oaDWaaVDjZY72Dy2sFbHzwlvZRaaOGlmXcwfc/BK2WtMuGhEGihbS2E8YYGetLJK82Sha6WsL5oFjB9elGyzRbfj3yXl9V8Hh2zuU84d0NjxeUSESy3M0FjLpnmMU25YTBwrfECgywEd1DethpCCMgUfFXyDOQJDIVrDSuD5LhnsJ9ipYD6f5QJApmUZ64mc6AsgLZMrAWlIYjkyDc2ntdxssDJAicLnDRwIvcUK32IE05de06ok+2QooDTgrIC0uOs3RxPtQn26ZkEXAnQkuETZHBGVAQUFN8NDWFcYdQsbFgIzJiCjJpbyJoyAzegudsjxzO5UxI6jiHbDJAgo3HNxm41PK4Z/jLDBQsBqD3xek39KibSoltIdMz2IX/gSbf+eUN7ju5Q5w517sAc76RZsnDS0CEYRPGoJRwc9EiDQe4IBX4FTWHBlDpctybNwB+KZQWaC3H058gB/qQWOjLQ+Iw5g9AHuHJ+MDQI/MGVhj2Urv/ycGIREXPQY7b2lews3Az/HWd/AOAce9NQBwAA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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