Air Canada

- Air Canada -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 65:47:d4:95:e5:81:ac:57:d3:0c:c9:b0:b0:31:08:f7 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Air Canada

Company registration number: 439662-6
Organization: Air Canada
Address: 7373 Boul. de la Cote Vertu
State / Province: Quebec
Locality: Saint-Laurent
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:47:d4:95:e5:81:ac:57:d3:0c:c9:b0:b0:31:08:f7
Serial Number (int): 134624992398093497251354204278661122295
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0e:8e:35:d4:1e:b2:e2:ed:8d:3d:e4:3f:2d:d8:6c:61:7b:19:c1:e0
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 9c:79:79:20:60:2f:c6:10:a1:9a:a9:e2:74:44:b3:52:be:1b:f6:21
Fingerprint (sha256): f1:a2:59:cd:b6:82:9e:b2:53:fb:2d:92:90:7e:7c:94:8b:4f:e9:a0:07:6a:54:32:75:30:33:f0:6c:8e:26:12

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Air Canada

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Air Canada

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rivolution.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Air Canada in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WC0iCRpKq3Fce6n4jUo
YO3HbTjvIZ9jprcOIT9tzIXKH/qEETcprb7UQ5uDhJ0jSz1pvJ6V0HZh9r8+AJmR
o9BJlJvyof5njqcUkGdYdTodRzNOhQm0WIpIT7K/ixZkv28vkXCKUN4j/Aib8Vxk
KeyMPwc3+aGWHroXWx2q+nrsfMrWSj+5BLo16c1MbUsbeLX/Iw9frosE7y5+2T6T
WJOawJxN7wbywPWm+elE9+D1AgTZL+x8LM3NsxxLuZKmZMRElGKTQCKdnIjrnXJL
zaRVN6eWEMc2f/TunPQWl2afzsiMp0/EyV44hno/zGOtdvfN5Bpj6/7OSaYQd5pU
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134624992398093497251354204278661122295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 20:17:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 20:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Laurent'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7373 Boul. de la Cote Vertu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Air Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '439662-6'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA444327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Air Canada'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28451305729972677128725553656019051882478531157752752055565225136424381083336069056587413445745402078294361863774403483086774910434636515435314869148591669960154431713958908624514948218366394605355462329985320269592158085511201932575258601125191800628921260082471683320901287413642045120463750411442939577075052502398248542420804927399950742518117321467043793158108792095433816573176668331041680517016116392030390278318582886661618135387312135671509638523110055864064337080672221534337440361933424602754069381165529537088085629200717611474484963004531776316812796123708928530746742461969712162719328940561083005555789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e8e35d41eb2e2ed8d3de43f2dd86c617b19c1e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															d4abace5c2b1116cd1555256ed201563278b94f5f92bb3a7c28e37ac783056de
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivolution.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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