TUI AG

- TUI AG -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 22:93:59:66:b9:c2:e5:f3:d1:1c:2a:1c:08:66:9f:83 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

TUI AG

Company registration number: HRB 321
Organization: TUI AG
Address: Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 22:93:59:66:b9:c2:e5:f3:d1:1c:2a:1c:08:66:9f:83
Serial Number (int): 45958832768109405139259016444090163075
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 36:bb:95:41:ae:de:d5:78:1c:b9:cc:ab:7f:34:5e:1c:a5:3b:85:61
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): b0:ca:16:e1:93:25:7f:ad:d0:5b:46:35:94:eb:76:a3:d7:92:2a:f4
Fingerprint (sha256): d6:08:81:d4:ed:86:29:d5:29:35:d5:f5:4d:64:39:3e:9e:b3:a5:c6:ec:68:8b:96:b4:10:96:a0:40:bb:8a:dd

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate TUI AG

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TUI AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.firstchoice.co.uk

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TUI AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgD3kqYWIiRJEYZQawpk
zrU2xvor3KG74Z6xwdZ/AfCKeiKAeY4J3Wy0/MauJqeIN7Uh/S6jNPUMNb7mt0ge
IMQxDS9rdaOlzL5YUzJ0FimFfGA7C4mjqw91CpNbeuYnRrb0KFo8OvooK0tXJHg2
6r8rKkZcOxXX1egRgC/26to7ZbaeTGAOUawzE+JJQ89PHDvmxc7abJyhy52KMJ+T
jARenH1mX3oo3p3wSgPKVN4+K3zdJrrxLQxyiwQlclb/zR8aMuqxuXnfJo749riL
YmRqZFe2+4pFVRqXQOzAl/qTA8Sfk8cnVMqwOjiG9FnNUzRS1Yc4+hZD9oaMMHJg
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45958832768109405139259016444090163075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:58:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:58:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00801351528'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26005567708636324878626946057107793309179067828940150569222547520563884133664034386789010757225818443258599274735826732236020094297929330319555383369539128083026506096152367473427440014778471625883193537194871957376793929837941248558154070080311719721567654386659663303965873294144537307638718086421996977289350236400121174591423620249412209774963515535577495263278436926552049055758736427958368667582663409339451909489688735305044467885516513950009424699474786327676272893451764781671111414451956104471642205170187991236910139605948647351099610592840420547587391630263521648241860072091960857984861357044994015387773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36bb9541aeded5781cb9ccab7f345e1ca53b8561
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															83c2c1aa04832e1b85258cb2083450f11317e252736f3085280b02108b3a97fa
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.firstchoice.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008f8186951c46749b583b872b4ae014bb1eba780d6a5df103feed0a28e7289dbd889a9de12543cb85c855099269133a8992cf865f835da0f248849c31ec39338fbe9ede632303b4cfdba5742de6e4a8721920ef36f23256bc227534eb0aacfcbab49c34775a7192118db2371da24320e1f5a0cb102d0f186e80cf2ebf4437edc4ec7c8953d0f32dc8f81e1f6c51b48b6f2324763858aaad7a2d245eb381425ff614b1953d2aee88af20767dbf041d97adda78a143b5197dc47ae2d3a6f8edc224597c501edc56f71b45bf2728fa0e0084d10a6f8429fb705a2ce53895bd011224090e0d7f21f90dd1d7f41f4521789707a8f381d425e1612715b8ca2dda6af64674f2a3381c258b6525c13a5891f84765e2f062f0f4a4f60edfdb75a224d863cc191f41f244a0487d0699187fd37f51c2af4f430b1f6a8422a4dfb1800d92633d7e2222659e9007de676564256f4f0ee127c98efa6a659796fa98a51f0de9cb5804261f14832dd7b1c5317394da4619361d893d3208b5ed44a0f5abf0f587f472b96080a410bc166ce56807a8c23c7827542b0eda43a84c09c029de8bd8615ae151e0f1c44b070414570196ef7321223a7f1f2df0095de42c3ff4521ea5f2e3dc7079891e4f6aab08da86d4cd5a01922c14c4217a82af77df5730594791a86e8c292374b8012d5b4dff235a835b4b3f669088056940882e0d48c0c64036ff0214