Duolingo Inc

- Duolingo Inc -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 71:9b:8a:24:ff:02:f4:99:c4:d5:4f:36:f4:ed:77:29 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Duolingo Inc

Company registration number: 5026811
Organization: Duolingo Inc
Address: 5900 Penn Ave
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:9b:8a:24:ff:02:f4:99:c4:d5:4f:36:f4:ed:77:29
Serial Number (int): 151010371440429796814626297784059131689
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 26:ae:ff:9e:87:56:bc:88:3f:97:1e:3d:9d:30:fd:9a:28:c3:7b:90
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 60:6b:01:90:b8:9b:ed:24:2a:63:aa:aa:72:d2:08:9b:be:bf:56:b4
Fingerprint (sha256): ee:12:e9:65:f4:af:b2:9f:7d:ee:f2:eb:e9:d7:c8:34:f6:d2:d7:bc:03:c8:88:06:7d:bd:fb:0a:fe:1e:2e:9b

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Duolingo Inc

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Duolingo Inc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duolingo.com

Certificate

The complete raw certificate details for Duolingo Inc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMiXSJ18AUw0dGzptpFW
XkM4ejYvR5txSxhlRJi8JMTGMIl4b7LTp4VhwsEl3cMddip1HJ6zjpUagIJbkAAd
90FRi1BVRjTNoo1Gs2uq85htBBr8FnmRMfSngEoQPazQbn/yTs28yRCZnLMTr8Nd
8Oeu/OhsHKt4oytnw/4a8ZZhTyo9W9O2fZkdwXGiplZm/SZESTro4OO0ODQb/VBz
4bSL0jniKWnDIjony3yFOiy/pnEgd6CPRHkHcB7PTKreTVDM+9kgJ+hvsjisBY33
3ljSadVwprWLGoScjC0HCXbYcpVCJoSL3wUbIUPOIlxTYLGwlnJo8u6KLLaKz3+a
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151010371440429796814626297784059131689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 13:32:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 13:32:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5900 Penn Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Duolingo Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5026811'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6278140'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Duolingo Inc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24336669638416554214642743941366510018125394692216534046280407410796351702826440473750720866789711748524347467151687210388132091525921021992737987610755527084431903920729995767947255225119209927790138460147444361628440957942937232567333788946565145977303127601020455534903906264915927673160718573310756233679273620495634993040368038453765522746626609053968487076243770992173745810298175192380153910380110007335938906251080968819825700223776882571967584853305143829625764406239752887588330530870542913060355192103192732529585576463135661049599841017679430624155920291289356160933875590076639107916562344729899421375083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26aeff9e8756bc883f971e3d9d30fd9a28c37b90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															91d74473b25dd7edea1e4ecf3dc13cc2d80add6a7672d6deb02961ac0472f949
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duolingo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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