Guardian News & Media Limited

- Guardian News & Media Limited -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 3f:61:88:e6:07:27:92:89:39:5b:c6:02:eb:2a:4b:d7 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Guardian News & Media Limited

Company registration number: 00908396
Organization: Guardian News & Media Limited
Address: Kings Place 90 York Way
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:61:88:e6:07:27:92:89:39:5b:c6:02:eb:2a:4b:d7
Serial Number (int): 84247793162125288353440544167056526295
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: bc:54:15:33:4d:77:d9:7d:a9:1e:ae:32:cf:c0:de:f1:9b:43:03:9b
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): e6:16:3e:40:4a:09:26:23:10:23:83:a8:7a:0b:1f:20:99:fd:30:74
Fingerprint (sha256): d9:a6:d2:93:75:6c:d4:a5:ef:14:93:d2:4f:82:4c:8f:5c:cc:6f:a2:a6:90:ab:08:7f:9f:c3:59:f8:a4:4d:1d

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Guardian News & Media Limited

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Guardian News & Media Limited

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

editorial.theguardian.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Guardian News & Media Limited in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15rC35m5vLqRNHoEPHlM
Bjr2ha8SjOLh1Wg/6R7770fwVRXj0tlVs3ThRaey44fdZdlbb7bPgv5/V1xVjDrj
KCGs5YRC3lyXE2WERNoLeQHZV++nYI+aQvtig/IxhetDaGB+rKxXEe/5ZpdeTf5s
ZafF7U1pf/Bhnl4T08SMzX+gqemjYq+QMwLGsbKUT2btMOnV7xgFiEQzvASBFYNI
ksj85ZFLdrWilbyKfKcl5sxwAhM6m6KLeSTqqYNmceafeiigbs/smeXvERdsS1qy
d/344J6HFWfXWOmMSSe6c/9drLf6W7xDiMYYflRPQemK95ust3IVTj4ucyDXyG6o
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84247793162125288353440544167056526295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 15:35:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 15:35:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kings Place 90 York Way'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guardian News & Media Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00908396'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00917749102'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guardian News & Media Limited'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27217551171762305589122919260975434124457675924804679115854013517838578838383038918062484831874895257567665695244220465173857660045682931939812721958780357258745829330871086717011853619632482937444173283833053679683843064141829258627644394456601295900367625821181196313414291659710669047341742446175335629021331073040748455934430246378042519199152831725688767388010901181146480745383684456030594888204756864199054818447175603040056241715560322497601256407842712370115349615245144735314705859875549406324035225892209971533963738551459240735340601679569630310483738260760432514956674562141298504209357516298707211823117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc5415334d77d97da91eae32cfc0def19b43039b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (814 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															b45288710f4bb40b3bf6794ea2e39d557bcbb0f6f117844174417051b0fd8d11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editorial.theguardian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008b6737a5e1d682867a13518b690f45bc1dbae5084159c2b80b8ee8f770f02c45370c93c655c9ef822a598a74e9f762386e9bbe66e14ee3e425b4b02ade586d9910a322761f15e38b677321fbb8c43e78340987a968a8d1205c8fe194a86b29aa0b4cbbf7943fc3a3e4f5afd15728cdc594595b6dccec12e559fa12b696b7a6b29b1a2b75c5c159f76610c6ca8d1c9a2aaff6bc742b2e874d9390b645c5934feeedf2807c54ece26767da68f729f345d26e32ac1e5f9622177d4a1611603f58642b053f7ba5af570b5485890fe30864377e08e98e0c199918392331524b9500e19f8bf4162eed9034089ed4f9d7a2eeb8e1caf4e222326da42dbf93c181e18ed49b78f958982fb39252abc790dbeaa62a6ba286d2c10f9f36c0aa3c419da9a0c35f903a2db80fab9bdd7f3731d5ee9a8f05f2b6781eeb31ae9cc91d5c6ab8bbcecf7aae2e3bd5e6f6776488d2cfe0076933d32d3279f82e39542bc9bd999151dfd899d35ceafeca2e5e85de41582f7687a59b1ca54d0c9a34c0fb12b0a4ca583964d6362eacb75db39d21bfb986f4577dab2a00069a2522eeb8fe6da0cf55185c86ffc733b734aa3ac35dcffff5fb50f0e4beded89bb41ac269303b2e62a87b2e3dc474f4f628d4d98b9195633d93c7e6af8e55ba1d3a5585b42f8a0de51a9987a67ca499e61ea2136e502575d3aaa41b5bf93d568da0667852fcb5023d7bddca