King Arthur Baking Company, Inc.

- King Arthur Baking Company, Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 09:3b:04:65:c9:b1:5a:a4:0f:74:d5:f0:f3:d3:40:46 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

King Arthur Baking Company, Inc.

Company registration number: 0094929
Organization: King Arthur Baking Company, Inc.
Address: 58 Billings Farm Rd
State / Province: Vermont
Locality: White River Junction
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:3b:04:65:c9:b1:5a:a4:0f:74:d5:f0:f3:d3:40:46
Serial Number (int): 12269486670821521117122740335657828422
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:ce:19:1d:95:1b:b6:8d:74:78:87:79:7e:77:62:46:ab:4b:3d:77
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): b6:35:7c:03:70:d2:33:99:b2:d2:a2:66:32:9c:23:9c:b9:8b:33:0d
Fingerprint (sha256): ef:dc:cc:30:d2:08:70:5c:58:b1:ec:c3:02:a0:e5:34:0a:4a:c2:3e:19:7a:2f:d0:73:41:f4:ad:af:0d:64:17

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate King Arthur Baking Company, Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for King Arthur Baking Company, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kingarthurbaking.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for King Arthur Baking Company, Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN8TCCC9mgAwIBAgIQCTsEZcmxWqQPdNXw89NARjANBgkqhkiG9w0BAQ0FADBP
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf
RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yMzExMDgxOTQzMDRa
Fw0yNDExMDgxOTQzMDNaMIIBozELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB1Zlcm1v
bnQxHTAbBgNVBAcTFFdoaXRlIFJpdmVyIEp1bmN0aW9uMRwwGgYDVQQJExM1OCBC
aWxsaW5ncyBGYXJtIFJkMRMwEQYLKwYBBAGCNzwCAQMTAlVTMRgwFgYLKwYBBAGC
NzwCAQITB1Zlcm1vbnQxKTAnBgNVBAoTIEtpbmcgQXJ0aHVyIEJha2luZyBDb21w
YW55LCBJbmMuMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjEQMA4GA1UE
BRMHMDA5NDkyOTEfMB0GCisGAQQBg55fAQ0TD1JlZ2lzdGVyZWQgTWFyazEXMBUG
CisGAQQBg55fAQQTBzYyNjgxNDIxEjAQBgorBgEEAYOeXwEDEwJVUzFBMD8GCisG
AQQBg55fAQITMVVuaXRlZCBTdGF0ZXMgUGF0ZW50IGFuZCBUcmFkZW1hcmsgT2Zm
aWNlIChVU1BUTykxKTAnBgNVBAMTIEtpbmcgQXJ0aHVyIEJha2luZyBDb21wYW55
LCBJbmMuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiCAWhpGWxgo
H7jkhmuDQfDFXTx+sIP2keZzhFa6rOFbXuj6KQKPBGUTiLWvqK3td5HpjeBIjWEA
29O9pvL5ZqQDL6PyruUMS295doeVD3iX9swxhOaGEVKo5xekadsOLXB2apFW25em
f0pWzaDxihjHJ7AsGeOYOwEWiGFTWn8K45C6/r4iUGGhIH0/7K0v9ZAPLp/Ai+cn
vmgzTqc2/ZQZRpFZEVxa93DjeLDQkLhrRBy1Tgm6MXvMcUwFujykEjv2Tui4jDaP
xfkcVFJ2dbbkGheN3MbI1IlDlmSAzpKuAnEIYbttbfdzpF7Fk7ZYB4UjSHAzEtKd
mUThlD+DrwIDAQABo4IIcTCCCG0wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhM4Z
HZUbto10eId5fndiRqtLPXcwHwYDVR0jBBgwFoAU77w8tK860EVedlTfx2R46S0d
dD8wZgYIKwYBBQUHAQEEWjBYMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRy
dXN0Lm5ldDAxBggrBgEFBQcwAoYlaHR0cDovL2FpYS5lbnRydXN0Lm5ldC92bWMy
LWNoYWluLmNlcjAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vY3JsLmVudHJ1c3Qu
bmV0L3ZtYzIuY3JsMIIG1AYIKwYBBQUHAQwEggbGMIIGwqKCBr6ggga6MIIGtjCC
BrIwggauFg1pbWFnZS9zdmcreG1sMDMwMTANBglghkgBZQMEAgEFAAQgXgQFAxYZ
EVMY6L9G5PVdq5qrF6bBtc7HalHcaHzq6KIwggZmFoIGYmRhdGE6aW1hZ2Uvc3Zn
K3htbDtiYXNlNjQsSDRzSUFBQUFBQUFBLzhWWGEwOGJPUlQ5M0pYMlAzaG5QNjAw
ZHZ5YWgxRkNWYkl0b0dYVlNpdnhuUTRwUkR0TlVBaUI5dGZ2T2JZVFVyYVBJTUV1
NEl6dHVmYTk5NXo3Q01PWGR4OTdzWm9zcnFmejJhZ3dTaGRpTXV2bTU5UFp4YWk0
V1g2UWJmRnkvK2VmaHI5SUtRNG5zOG5pYkRsZjdJbFg1L1AzRTNIYzl6Zlh5N2ds
YktXc2NxWDQ2L1JRdkw2N21pK1c0bDEvY3lHUFowTEZ6ZE9rWkUvVVNtdHhjRFB0
ejRYK1RRZ3BlZi8xNm1MYkRGdUk5MmZYazNlTCtZZHBQeGtWeStuc2s3eTZMZ1RN
blYyUGlzdmw4bXB2TUxpOXZWVzNUczBYRndPcnRSN2dsa0tzcHBQYmcvbmRxTkJD
QzlNNGpnSTZoQmd1cDh0K3NuL3k5dkN0a09JUCtDaGVMWmFYTnd0eGNQWTNWK1A1
eDZ1ejJhZFNITTg2TlJ3a2NWaDNnWThYNlhQOWVERzhPbHRlQ3BqWGo0cGYzeHdj
YUEranowZkZuMTZycGpTMlVhNnJWUzBOVjdVeTBtR0MzVnA2RlhxOEtWdGxPMm0w
Q3FYR3JyV3FLcTN5MG5uZ1dLbHdHdS80WElqQkxncnJXaldkVmhaM2VZd0tvNDBE
WU9aOWwwZTFmdCtsTmVYck10a1JJTzhFZjdZTythOGM0cnpKQnd5R3ovSVB6OUNv
OVh3amkxRmozNVJwYkoveFNUbXNwaVVBcEk3RGwwNkZUcGViM3k2cHJ5RlZaVW1I
WjlpNjFwWDNlTGd1K1poa1RjbmJxNlFLREFHbEJCZVVnWUt5d1htSFNTZWJaTGcw
SHUraFFscEtlMlZQTnFqZnozYmd5bGdxYVhYMHY1WFpBVWwzZWJ0NTRDU3drc201
VmtZWXBFc3V5b3ljek1qSkRYTHdVVVkvWlFaYkpyQXBHb0dXbVJDWnlaR1pLSmtK
a3BuTXJhdXJMQi9Keitkcm1TTkdia2RNUHVTK2NTaXVHVVgwK05TWUFJVHBOUEYx
OEMzaGl3eXhLWGMwa2lSd3J5WW5NbktTVEkxRVNoQXAxMFNPaWEwanRxRFRVbCti
TW5HTitDNzA2SXJod1NEb1RJb3NFSU5nNEtNaEFTcXNRc3hiMnVuZ2tLWFZLSDR4
YnpFSkoxdVhiRlFPQjZtRzVNZTM5TGM4MXlyWDgvNkdxQ0FHYTJocFpTQ1REYWRF
Qk9pTVd4SWFBdHh0YlF4aFZwajFEV3ZOMzNFMXdMOG1qQU1PTlRnWmlGNXdDSnEy
anRjQjRIRkx6K05tQXpPU1lPMjVETXhSaGlQQmlYbFNrVWVnMzZQY0lWeDE1Q1V1
U2k3R1J0ZlEwRVJZZGN0cHhRak5kdXhnc0dWUk1GQ1o0Q2tqUEF3dTYxbGJxYlJs
Q2pQT3ZCa2J3N2dKTmVzTjlFRWV4Q0RFNysvSk9oTXJ3MzlUOC9zcjg4YTVwTDdT
ME1lNENDeldNTnd5WVFtRlErcGo0anJhRTJ1T1pRR2hGcjRxK1FyMHNaQUZsbmxX
OTFyR1Y3Q0hrZHV3NkJqZjRsUkZRZU1aUVd1Tlh5SVRvZkJNQUIrclNNcTRXRW40
R1k2TWM1Y3NEeXNXay9pMkprUVJHRVpVVXpxSW5TSnUyeWgzQ2ZKOE91R1pyVExu
dk13MVFlYWFRREtsYVlteU93M3h3RkhyOExkeWlJVDBxclN1MjY0dnVUN0VPdlIx
amVCbDdCbGtOY255cHZRTk9Jb2wxV05ueGVvUVJhSCt5RGxXUi9xYldoYXY3M1dN
ZkR4WkVWZjQ3R01yNkpBc0ZsV2pMWkdZbGdVZWlJVVlDNnBLM1NQMkFvMWVvQit1
WXd1cTRnbzF4d0s5Smg1bWZGZDlyTlFyR3BXVW50eno4Vms4cXYrbi92T2pyd0Rp
V1ZyOC85amcvN1AyL3BUTlhUeXllU2MvSDlHL242WjFmOW1JZCtyZVQ5cTRxZjh4
dmZ2SGJWdnMzSllUNDd0MVp2RWNEUVVHeEl1ZnY3WGU5OVg0MWVmN3JWVTg1UmNM
c1dtRmhQdUp1K0Z1clRBM2JQNi90LzhQVHNpdFRNTU9BQUE9MB8GA1UdEQQYMBaC
FGtpbmdhcnRodXJiYWtpbmcuY29tMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAK
BggrBgEFBQcDHzBQBgNVHSAESTBHMDcGCmCGSAGG+mwKAQswKTAnBggrBgEFBQcC
ARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAwGCisGAQQBg55fAQEwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQENBQADggIBAEdOukuSKVePj0Pu
5i3PdP9L74eYEvrfyw4fc2Ni+EwqzLE2gfLID0t8xF+WFOwO1j0oFRNQVgbhh4o5
mo6A+6JYGYanMnmQYgy/sWztfDq+gGCDSvMlY+ys4SfxCPMmGvs15EcfsxX3nGIA
yjcs0KFnSKY6QLiX7NYOKUEEyYlBql1MRFaIP0SDWmjOOZdVoyy4CRGSduWgCUc1
PjLbA4w3TjycUWXdNgKMKGgMQ8sBqXvI33hoUuZuYkpLq5VjK1tuMeBpfo6Fm1uw
Uqrt/milnG+rppUrHte6N6VJ7msjth/a1cqNr/IhKc3muSPWNY3TOmJAdoiR+kXC
ZqrnEgGwKTcVcg5BuFif+pV6APXoXfuDXQ3wu15hnprZvb7LJCxO3UEX+rYOk+Su
GzPfiAP3kmY3EEwUbc9T0BiCoQ1yyCAI1+5Ob6ylmlgzPc4xAZoPL6DZDibAS6Zj
dzp6tF8eLWomowW3EpNEMTt3cI8YzwSefVQh+uL7znAz2jukKmobDPzBtu4BztWh
ry4nAxKsQBGT+QK+dUYq2Y3boIVqxRRSccb2HSjhS8QymPldtc3fod6yq6FyA1NY
f2dSHV7oIKWA6ip/bm0Rb//Q10R/wnyz8pnr3Oi8bqciJsl/mN+7FGbkyfNHRV72
K2TkhARl5k+JrVqYQf0hhzlUKEGA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiCAWhpGWxgoH7jkhmuD
QfDFXTx+sIP2keZzhFa6rOFbXuj6KQKPBGUTiLWvqK3td5HpjeBIjWEA29O9pvL5
ZqQDL6PyruUMS295doeVD3iX9swxhOaGEVKo5xekadsOLXB2apFW25emf0pWzaDx
ihjHJ7AsGeOYOwEWiGFTWn8K45C6/r4iUGGhIH0/7K0v9ZAPLp/Ai+cnvmgzTqc2
/ZQZRpFZEVxa93DjeLDQkLhrRBy1Tgm6MXvMcUwFujykEjv2Tui4jDaPxfkcVFJ2
dbbkGheN3MbI1IlDlmSAzpKuAnEIYbttbfdzpF7Fk7ZYB4UjSHAzEtKdmUThlD+D
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12269486670821521117122740335657828422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 19:43:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 19:43:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White River Junction'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '58 Billings Farm Rd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'King Arthur Baking Company, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0094929'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6268142'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'King Arthur Baking Company, Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20971585649643188227449531229467985211788964684305206681125338367448141141857075800146232965059714357149365920774979005048914121167722938578177846500416715421768605457066120514443964621269978715466166480832750576990613635977459470046212725941910463068050306229700529093272186772153390886004214299511910983820477283090296162134645484128471967046702746029882228883779132128716497354283276933600914786476455392460232517371473845681485715009098443991667144954790616227656830295566431295117554433110348064060871659909642046852827562186652647841590332925904487453362159489297135544678581687884858131610416863515403261805487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84ce191d951bb68d747887797e776246ab4b3d77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1734 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															5e0405031619115318e8bf46e4f55dab9aab17a6c1b5cec76a51dc687ceae8a2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingarthurbaking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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