Entrust Corporation

- Entrust Corporation -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 0b:f1:6d:8c:dd:18:ed:a7:2b:51:9b:5d:cd:d3:0f:41 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Entrust Corporation

Company registration number: 705421
Organization: Entrust Corporation
Address: 1187 Park Pl
State / Province: Minnesota
Locality: Shakopee
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:f1:6d:8c:dd:18:ed:a7:2b:51:9b:5d:cd:d3:0f:41
Serial Number (int): 15875073439556841764273359172681273153
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:15:c5:1e:ab:02:b9:f8:68:d5:58:b7:42:df:d2:18:83:b9:1a:4c
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): df:7a:c3:7f:96:c9:9e:d6:a3:a3:be:8d:b9:ca:b8:d7:83:6c:47:51
Fingerprint (sha256): e6:8a:b8:d0:ec:0c:37:d7:30:c7:20:27:9e:6a:a4:44:93:9a:b8:49:35:c5:1f:59:20:16:9a:b8:91:78:e3:37

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Entrust Corporation

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Entrust Corporation

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san1.testcertificates.com
san2.testcertificates.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Entrust Corporation in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYOqzSobYCIuxs0Q/vc+
o1xNX2D9YHUytBrTTbZhiQmDqAo0fV1V1XtWhIORSqU3pzdTXB9V0W6xyfy3Gg9l
Kf0WohOP+cDuwVB8dPeOxbEzTUFuymyzoykwioctOZUGbq+Eh+BbnrrptI0gYezY
j/t9Lixl2ztAFJbmUSZcYv6p6VBYrHQmtUoMgF/S+k/N1C6IJyMzrBVCLrer0M+Z
VbIkm8Uk/lqtimBqIlQUV9/ihVYPW5gZA/bRk2N9aLgynNmR4JS70BnUo0Mmr2zv
WTs6vmsLs18iGPOJUTVC0kT0Kg18zmitX89RvONQCt/qUmsOy9uPwDYNrafIaNqR
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15875073439556841764273359172681273153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-11 18:57:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 18:57:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shakopee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1187 Park Pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '705421'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3798703'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Corporation'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23923967151365259031090336656302200081881027705981477772470195405753490615657031672697948973381698274308811433500206063295204376943168916526270771734901657508613115342391513201040971893554318470977835209270792335462789456689731093990272473579027411314059070601739531759144780284070865443434958122062885028880944334759271889556099415490624695869956407767020948632375020973516527217557188789117628225177185085630504482340580088667380770028473574167601093605961647043298387132239921196894808186002905375982528089067468674870582740992712222447311939860766497800146522432373416089461110075303076537675465813749242967790011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d015c51eab02b9f868d558b742dfd21883b91a4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															454e794820a9657ad0c2dc528549fda65b5097baf23adcf88c39d6a791982e17
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAAAJVUW2vbMBR+3mD/4Ux7GliKJMuyXeKOtewGHQwGfe8cLzbz7OC4Sbtfv+/IqUnKRjeBrU/SuXznIi3f3P1saVcN26bvCmGUFlR1Zb9qunUhbsfvMhNvzl88X76Ukj5UXTXcjP1wRm9X/beKPrXt7XYMW2QTZVUc0dfrD/TubtMPI31pb9fyU0cqbF5PTs7IK63p4rZpV6RfE0nJ9re79TENK+jbzbb6MvTfm7YqxNh093KzFQS63fbsrm26H4Wox3Fztljs93u1j1U/rBcmz/NFOBW0a6r9RX9XCE2abJzwdzDwJ1WrtV6AhgAdouXYjG11/q4bB4RIl/2AkG5G0FsupiOQHqpypPtCSM2EwbQtxKvU24vsraB9sxrrQsCpcoLqqlnX47xcsPoav2fLTd/er/vuQf19GII2fdONIOq88pGxXlmyj6FOVUIQMCfQGOUpPgFOOXJGJacwgwpGkGDMwFpl6OCTIU1cn6SZ2JnQBAPNJGVCR9CgR8hn7D7spg49cwyDBZ+r/AAxppU1IJ5ks5d/JZbms8oEQ1aybM7UBAOF3M7EJhgEjDbH6L+8myxV7qBzwJOlPFHZKZ7qqvWckAMOMlZnszzGYfmIys1YP+axKsRnY/SD7s7VuUpKLpCOrMrRuHmYbaklbh3WmbTS8v9j0Ls60j7Gv+gzl2TOB8GogdFYpZGGeceCypcwGk1fFoW+wOxAAZJw6FhOOmgiBa2OdOtAyKu8lnhOWpx4iV6sJWq0CwC6O4luTa9O3R8vfz2ZEZeELFuVlpx7DZextOGPAOAA1Gq4ujZWgyoQHKdMTIYUADDbUvKF02EPSXMTwCEIwYh9MGLySxNzD3NmgLgN2Hl0ROTqL/jpYDId7lXectniEhFgQsYSyZXF5eFNg9C0MszQ8HPFwHPWS15FLhQOT1PEly1RyTY8ASDBs0U8W+6NiIP0kMI1ZkdpsOnhEAmDS8et00q+O7GyZcxysJBixZ2v2I1Dyrn9QCCR4SHSsINElmh3lJ0/K/3EFBXh3pLcJnzsQxg+zAbV466NmXuw5Dku5S5N6rnlDJ+ZNAu+sX5I1NWMDsldLtbhj9f//DcoMJnvEgcAAA=='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2.testcertificates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00084f3453a7200fa0bdfb988995d715186c59b080f398caeb82c7bbe5d79449eee53c0f1a81318a9fbd47fff2a2d627d09e4fce3fd9991b5f74893920ed54496dcd7184e4fa622936008b49e6669b200a23185a76888e8c1d960c8dcd246a7436ccc98d47a17177657304f5d26ec6a9dbf2bfc4393bb742fedb7908c91475a0d545a38cdfed4b4cdadc74eb78de24a6548e68a03dab7aaada70d86fc2b4c226c23db57f77848e61f1454a10de7889cb9312328aa23134de655349e9d5a0e0b500958ff8c8cb1bc1081b04f5e4df5d8e901370c81d903742d19795d41c624823a68bac11974f4f8bf3574d47bf4d37e7b3240b2a312e88fa0a895103ec69db5fec8d182a50cf4c27e8530bcf4b4ec764483e1f4dfa5765417ca53a4fa9e06510f1f67e3b5a27484fde36285b23d46f71b43243d4a47872ec96590ddda37b11ecf10fe98ceba89de702004a2eba9c181a680fc23ecb4c1aae7ffc994b2e02125c6b84b9766ddd8854bef058043f8c56731e6ffd35630e105a6e5b1c2c50826cce9a3f4815c1ad161ca6953f2f1a3915bd26e7fc7f03ac6e56c14f01c4b74e830492f99abddbd624bc8259376d641b9121b1d76f54e5d2f3034752d462a334f6a700cd530cd8a9aa8aab980550df830a5a9ee2decf4a299d45949596e3378179e654684d65e3cafec3d740b74f6d3002b89c501c19729dfab27056ac480ec2510480