NerdWallet, Inc.

- NerdWallet, Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 70:87:0e:df:9e:bd:c5:48:ca:59:3a:a8:38:78:24:21 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

NerdWallet, Inc.

Company registration number: 4794644
Organization: NerdWallet, Inc.
Address: 55 Hawthorne St
State / Province: California
Locality: San Francisco
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:87:0e:df:9e:bd:c5:48:ca:59:3a:a8:38:78:24:21
Serial Number (int): 149574797274555521480034360540156929057
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 35:f0:55:d5:e0:a5:f3:8e:ba:8b:03:b3:f6:69:2f:2e:ee:f3:0d:93
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 29:38:3f:62:a5:b3:78:88:c3:d0:40:64:43:44:59:89:ff:d5:49:0f
Fingerprint (sha256): f1:45:3b:4a:b6:13:d4:9b:bf:59:6f:fa:df:39:d8:60:91:37:a9:7f:92:3e:47:9c:ca:f5:76:62:93:b1:97:c4

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate NerdWallet, Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for NerdWallet, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.nerdwallet.com

Certificate

The complete raw certificate details for NerdWallet, Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgdFsMMLiOZtoAG2xhdr
3o6bnEy8JVo5/TizKfQ/VyoWlaivofF8fCbD0ebgWXUEpX35H+99ZC3D3JvnU/I5
EAD3EDZJJG2mGULxGUqNVPGFjJAKP24UvSeWvxRoNCn06jb9XR8vuuy6881LoxpV
gWFiJg/gLusPvWDaFT2bfwq42oyC5sXUap/H33H13H05+AlqSfjbhHiPUyPgW/ri
UL5QvbjX1B1WLm9QEVaJakTKvHPx1uyonDLhC84ISUIYxfJf2mt0wcvfAC1+WGCZ
xk19KQpcHMXapWTdvP/aEsAq+Q5f2QvXoPsa/s0LdiyxBLzTav/ezck5bWEwwb33
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149574797274555521480034360540156929057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 23:10:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 23:10:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55 Hawthorne St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NerdWallet, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4794644'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6898890'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NerdWallet, Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22978957573312427651494230860740387459580445880218163918818123377563976726882003072700671407860284864553032663311854421081671388715798120967571712727925879039982088440485972823192969446739044232505732262516749867217017638385873972375945112931627032169346417946897424907082644190730579000832430870705073707172084665968495352843126738365218022934429873609208167564130044768149475039619223833820029850690047172265375671337525859619325727071335604334677467546244940656054581694798925511676571996351136763367837562275532559037140544662522930083465396295638082624605042498220216324429005147708334753044078332949288894461947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35f055d5e0a5f38eba8b03b3f6692f2eeef30d93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (946 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															f32326cd05b4d9631cfe3cc31763cf64051adbad3218e3d9ca0126a6e234fd1e
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAA/81UXW/aMBR97qT9hzv3aZLt2E4CCSJUBaoOiU2VJvFOQxoieQkKgVB+/a6d8NGt7cTDpiFd38Sx7rnnnmP6N7sfGrZJuc6KPCKSCwJJHheLLE8jsqmeWEBuBh8/9D8xBvdJnpTzqih7cLsoHhOYaL1ZV3YLlM8Vdyl8n93D3W5VlBU86E3KJjlwuzlrQHrQ4ULAcJPpBYjPAIyZ+uttet6GIvA4XycPZfGU6SQiVZY/s9WaALabryOyrKpVz3Hquua1y4sydZQQwsEqBLZZUg+LXUQECGzLBkEMgH6VVToZfEvKRT3XOqkoTPKY951mH9tIcblq1kO66q8K/ZwWOWArOiJ5kScEVkWWV9hIGPCASh87hkse8UfAaWCcfwqH9efVsi1+LcTtnTcmsIjIVzzvU6/Dg5gJ7mMoJrnE7GLumvzFC3kY41tIBXO5RyWeMxlj6wU8nB5r7P87el4XW1NCcT8WvENNYPtUUmWIaM/HFxFbboYPMx9NNtyYJXeqsH8LrhOoUQNnO6Omya0UHncRVGJlnCq1T3hXMGtfMV9NT4d/n9tfmNeL0R0Bz5kEo9HQVUdftKdnqGxo3IH9W3+I1h+GCfKgvkKy0pClhqIxSNBMeHqqsv8johKuUcZC2gmKmXWeMNZjrekOsWRGunddeVbvIvCWE0rnW+FkKxxeB5OXdhyvOmb2K9gLEa/HYizH7gU6nsv0fqmTleD1xzcUP78qUhi2aHcrttdGiNFFkki0sbT2cZOaJTZaN4HDwOlII4PVbnoqdhhHY+3Div/Zg5+HEB+ThwYAAA=='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nerdwallet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00e328fefe9b29fdafa0f824d04f20e70c2ba0bfac23368b5770c0714026e8f7fd677163d636c00abc73c14a492d6dff1be12034ccf5bc8f47d00b9e50cb224dd9f8d5f28fbacbe6a4e24cae2b8dc06caa6934de4e9062104939eb8d357995607329d5c4c13b8ff75587336d8f4610a7ce77797a3e40a82ce1351c9a83b6782f2661567d4127dc2e3539890429076095b9978b5340d52c35fa0ad5b350a79bddbc1128d0b857a1d07287c2b0bb2c01e1f4362fa298a7c6c1bc8297b62bb8d36efea2c126a5d971548d844951f641c968a1a124825fe34f91dd6ff5f89248c11aabe9f809baeef2f5cd7594273c8fdd0de8923cda40ba896d3724ee38bc5d86fc00dbba0c3fac267f895dfe4321b2da39cb7245349c29e3cc8edba8f610d398090026472f1f56fdb5efb1f1c5655dc82391db58761ad4fd01664d6c706488363f85456d88a5557f4ef0ee80adafa922fad088a1dd91687581ac7951a6f5d3140dc09ed98925b93a7f32f0338f8aedff936a4f24c4f007c60218bb3b7a9a3c7ff7389e6c57dae180946f06514ed8540dd1ab904e83b3f5cd1b1e9a4534de8d7d5c078db006b7dc9dbacff3edc1522f8f1ab2d01313ba2852d9785a714895243aa7a42de739f7971cc12fb8f5460be6231f51c995deddf73bc38a5422a6aae6d3f511c042a383b9f8d63d1281a7b64d1459d40d0508c71e32df192dd52fb7e271e3df