TUI AG
- TUI AG -
Issued by Entrust Verified Mark CA - VMC2
About this certificate
This digital certificate with serial number 39:c7:13:73:2b:d1:29:0e:8a:56:80:9a:7b:6c:16:38 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
TUI AG
Company registration number:
HRB 321
Organization: TUI AG
Organization: TUI AG
Address:
Karl-Wiechert-Allee 4
Locality: Hannover
Country: DE
Locality: Hannover
Country: DE
Entrust, Inc.
Organization:
Entrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 39:c7:13:73:2b:d1:29:0e:8a:56:80:9a:7b:6c:16:38Serial Number (int): 76799657325170508779597255827104994872
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: d4:f8:3c:49:44:45:44:17:75:06:c9:91:fe:8d:e3:e5:3a:52:18:7b
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f
Fingerprint (sha1): f2:8d:52:18:c2:24:3e:62:34:58:91:57:e0:fb:29:08:86:03:a6:8d
Fingerprint (sha256): f9:d4:8e:d4:38:0a:f0:f8:97:00:9a:16:e6:94:3d:93:0b:bc:59:4d:2f:3e:6a:61:24:96:c5:d2:ff:6f:8d:fe
Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/vmc2.crl
Check the revocation status for certificate TUI AG
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for TUI AG
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Extended Key Usages
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mi.firstchoice.co.uk
Other certificates including the domain name
(limited to 100 certificates)
Certificate
The complete raw certificate details for TUI AG in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIP6zCCDdOgAwIBAgIQOccTcyvRKQ6KVoCae2wWODANBgkqhkiG9w0BAQ0FADBP MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yMjA4MzAxNjU3MTJa Fw0yMzA4MzAxNjU3MTJaMIIBLTELMAkGA1UEBhMCREUxETAPBgNVBAcTCEhhbm5v dmVyMR4wHAYDVQQJExVLYXJsLVdpZWNoZXJ0LUFsbGVlIDQxEzARBgsrBgEEAYI3 PAIBAxMCREUxDzANBgNVBAoTBlRVSSBBRzEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdh bml6YXRpb24xEDAOBgNVBAUTB0hSQiAzMjExHzAdBgorBgEEAYOeXwENEw9SZWdp c3RlcmVkIE1hcmsxHTAbBgorBgEEAYOeXwEEEw1VSzAwODAxMzUxNTI4MRIwEAYK KwYBBAGDnl8BAxMCR0IxLzAtBgorBgEEAYOeXwECEx9VSyBJbnRlbGxlY3R1YWwg UHJvcGVydHkgT2ZmaWNlMQ8wDQYDVQQDEwZUVUkgQUcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC1fcPMj7XX5Rz1vWzTSbqdQwWe4nYiHf2aSNBo2Yy2 cCoBSJc7nig22aqWkfxjxAaxbtpEecVQaZF9n7DBMFd80ZGoOjX72XruLsCgU3U8 fWItxepNsKndl2z9pxviHqigakt2KbPGFT8W1Vsvm0Y/BsX0gUZCJKx3r+gGln59 XZxMW3uaJbo+97bRS+nMEgOawESwjw4yaillxjmuui6UR4QfWL0eav+WeaPsTQhM 8xoC+NrehgOwN1zKJdA/jP4UwgrMLbjwvElAMxR8liK0Vq3R9Kwm6o8/BOvc6642 B1kRJCGYsAjDGegaoVhCCo+r3Ttz/CF6A3Y5jglznh8TAgMBAAGjggrhMIIK3TAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTU+DxJREVEF3UGyZH+jePlOlIYezAfBgNV HSMEGDAWgBTvvDy0rzrQRV52VN/HZHjpLR10PzBmBggrBgEFBQcBAQRaMFgwIwYI KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDEGCCsGAQUFBzAChiVo dHRwOi8vYWlhLmVudHJ1c3QubmV0L3ZtYzItY2hhaW4uY2VyMDAGA1UdHwQpMCcw JaAjoCGGH2h0dHA6Ly9jcmwuZW50cnVzdC5uZXQvdm1jMi5jcmwwgglEBggrBgEF BQcBDASCCTYwggkyooIJLqCCCSowggkmMIIJIjCCCR4WDWltYWdlL3N2Zyt4bWww MzAxMA0GCWCGSAFlAwQCAQUABCCDwsGqBIMuG4UljLIINFDxExfiUnNvMIUoCwIQ izqX+jCCCNYWggjSZGF0YTppbWFnZS9zdmcreG1sO2Jhc2U2NCxINHNJQUFBQUFB QUFBSDFYNzQ4VE54RDkzRXI5SDl6dHAwcjJ4dmI2MTZJN0VFUUZJWUdFMUpidnNC ZENwUFJ5eXVYdUtIODk4NTY5bTBPaUZVcHU0N1ZuNXIxNU0yTXVubjM1WjYvdU44 ZmIzZUg2c25POTdkVG1lanBjN2E2M2w5M2Q2Wk1wM2JPbnYveDg4YXN4NnRYbWVu UDhjRG9jbjZqblY0ZVBHL1Y2djcrN1BYRkorZGo3ZnREcXovZXYxQjlmYmc3SGsz cTN2OXVhMTllcTUrTDc2dVNKU3IyMTZzWGRibitsN085S0dRUDd0L2ZieDJINFRu MzhjTHQ1ZHp4ODJ1MDNsOTFwZC8ydnVibnRsSVI3Zlh2WmZUNmRicDZzVmc4UEQv M0QwQitPMjVXMzFxN0VTcWZ1ZDV1SEY0Y3ZsNTFWVnNreVBwMzRVT3JpdER2dE4w Ly8rdnUxZXY3cVlsVi9pZk90MmwxZGRwL3U5bnR6M0g3RTNwOHViajZjUGkvTGJ3 N2JRNmNrbFAxbDk5dExhME4rMlNsNTk5WkYxenZ0WE9yalpFSS9tcUVQeG5tVGVt ZThOYmxQa3l4RlkvdHNzbkhHMlQ0Wk9UTEoxMkM4YlBZbVltL3ZaWE81dDBxcHlj b1AzMmR0eFY3c2cyNHZwMEhPV25HWDVZQ1Y5Y1ZZa2Urb0hRd0Z5VUZ6TEN6S3Rp TEhCM21mOVVDUFpRcmM1blUwUlZiNVZxS0dZM2lWVnhLcWJFbHkzTWwrTENEY0lQ RUVHR0JjQWJBQnVnWVlqUk5BRXBrWVMzM1NZakhDbkFSRGswRkhpVlZNNnRLbnha V0F3WGxFS1M1SDQvZFdXeDRESUFSSjhxSnNqUks0Z0pEZlRvQ0E0S0RGckJrbE9N K0lBWEEwUW9MWFNJSVhZdWdJVGh5ZElQcVJxUkNXQUNsVjArQUJtZUVERUVWdDVY SFVBMWMxVjBrNHpTUU5Wc1NNcGhuc2lMSVpDNEFONzNyMjdtbzBjaUpwOEFJbXhz cG5KUFVEY1F3SVJLeVVtUURKWms5bHlOOFIzR2lQTThYZ0JGUXhNaitWekhXR3RZ d1VKUVNmNENsQktTbFVvVUVvWU1reDllQ0RtY3VrMllsUFpsb3owNTdBOEtwSXFC NVJBbGVZSkJiNUlSOG9DUndBWUFCTm9NWUxQbmxuTmFRSEdzQ0hNRUtWYXFqVTha UndvWUZMUksycGVERG9kWlhEcUNPenhGZW9uS1NSUHBFanhUZWJZbDZMWnZDd0JR S2Jad1BHb1NlR1RjRXcxb21LaGFLWVQ3T2dhbkJSVkJyNlhJaG9tbW5KSG5YakRi NXJrSklqY0p0aEthRVNvWG5QSXN2VVptVFNtYVdwMXJNRFBvU25tVkptdXdZYUVa c2VxQ1VxWVdvMTZ3UUJ1QTJtYVdldUhqRUJkQ1BxM3B0WmRKT2xabGlzRW5xVkpY UXFhcSttQVYvUHVyNHQ2Rmw2RVQ5WjV1blVTcDNGVXJ0U3BPNndCS2htcmpKeVhu K3h4cE9aQ3hNSkFyeUIwUSs2RlhLREhabXJTRnBIemZxZklEcnNIMWxTai9wRmxP Tk1EODQ0NU9QY1p5Q3NXcFlaNnRCemI0cjhMV2tTZjNwcFphM0hhVlRUeUU2N05N QzFpOVN5SzhoSlpHWmN4c3E1elg5VmI1MFhkZW9pUEUyZ1BpRW90dmFNWEl5b3BU aFpObXVQZ0ZydmdNQlJHckpCUjRZY1dUT0N2dkpibURoOGhwYUdWQnRNYmIyVzJV U3ZoMkNrSHdSMlFnZmRpdnRDVmNXSmJHTC93TC9vY2NoaklUNFB4eVd3WUJNa0FJ bWM4UWk0YkhXSnNKN3BTcElVU054QUQ0WWVMQ2NhSXpJdElzT0lQQXR2NURnTGZC RkVFRTArL01saDVwbGI1aDA4NmFwWjFEaHJGbEZMWXdFZEkzSmRkS3JqRGFHMmZO ZitHU2tXdE5XOHpzQmJzQ203K3BSMEEvTlZBaEJrbnZwQk5ScE1pWVNaeGY2VXpk bTRxUUY1NCthbTB3S3F0U1luQitLZjQyOEVNRitzd3U4d2g1WTk4cVJubmdKcjJt SEdpditaVnMrOWRjSkVOcDJ5emxTcUk1YUJIUWQ5Nm94RUVqYWlCWWRVeThSU2JU TUFQd09ZSFB2SXlINkNTZ3h0Q0tJcldGbk5WR05vdmNMeVpHcjVvQlhraFJLTjlN QSttWmhJYjVkQm16aXRxb0F6MjNpc2pCYk9MZ3pjZ2FjdzJ1SjZSTytPbzN5TktO a0lwaGMwcURQTEFZaWE1QmpYNTVyeWMwM1JzK09sWU9UbEFFcWRjUmpDTXdOTEw1 b1pOR3lZYW92NU1ETkxqRFRTRWU4K2FDa2lac3UybWxoWU5jdFpOd3pud3NVblVZ d045OXBaWUhHQnpjcFNZSUdONVF3TElCM2JqTFd0ZDdldWkvc1NyUlkwMkxvNDhH cUNnSEdwcTc3MThtOStya3poVE5EMUZsWDdTZUwwNGRXRHVSRVloVmVzeEZ0WS9u OWJrVVVlV2J6T29NcGp2ZC9nN3ByWTNTTFZVbVNPdUh0N3RnWWI5UmJXcmsyWWk2 WnRuT29hUmtNZEI3VDhvMURZSkhnOTlzeFc1SWdkMkNSci9LNm1SY0FXRHRNWjhI OGFtK285Qzg0OWJ6WXpyV3ZuaHFwS0RBTVFPV1pXM0pLcU40K2UxOHV6L3NIVDkz dVI4TWlaNU9kUjN2byt5OFh6WHNlUk1EV0ZPbE1uQ08vd25DQ3RzNDZZT0VXMjh4 TFVwazVyeFpFWkcxaHQ5UzZEVVZDcHNieU16eU5oeW5RdkFRWFNOdWhsa0ZoZTR0 aTlkT3RlRUIrR0pLZEhtRWVrcitOeWdmWG0wZlBYVHEzd1g2elZsdC95SDdTbjN3 Q2hTOUhjZEE0QUFBPT0wHwYDVR0RBBgwFoIUbWkuZmlyc3RjaG9pY2UuY28udWsw DgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMfMFAGA1UdIARJMEcw NwYKYIZIAYb6bAoBCzApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3dy5lbnRydXN0 Lm5ldC9ycGEwDAYKKwYBBAGDnl8BATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQ0FAAOCAgEAtiNfWsXeKAGcsEk3ND8t7SUo4kpDoLatA8MZzqe/fpq4 ZTOH1s3Bl6vGY+c7elmd0IZOk3JaFGsLyiwfQ+sRTtaeId0y14UUf9R7upSlc+Pv bbKTYHSZYmeP1U4m4ewR3I6+sd3SAGqMY1pB1RFS6Uk18n2uvHIf+9qw2m6tkt+r dJzQFp6vm559aZIKTinzUQ8e+7LcCbIO1U2Ahlc5CNXZWoxOj8AEGlwwGL9nc7yB ngrsnuUzuDYPEFVcKGgAeL+UMKJvgDr1QL7VNei0nqkiAMpiee9aqf0y4YfQvA4O C76c4n3Q9oBj4gS57q97O8YQTKt+anmNwi5iG5N6r6zR8QSP196y/v2BPRDP+Uan PnqG+gWUWUIjNGNU2xYe+2zSF1YrZttlrB0LQfSSakz0QeCOMANEOTJ+QNHMsEHF c5z2u+PT6/0by0/ceQOyGrVJLt3eO9TOBx/B28WdbKcMuH5AdR+62KtFWL3JHMz7 TlI4lI4lUoOQWHVpviNHRiZAOSxV20wtC/9+sLO9ykgwjXFRyON33PDoSurF7gv8 2nGyP1Knj7kMGd7QVN5CAjCzyJ7rYjiJPQ+RSXMqxhNLPNHUG+imSWxbVO2Fuap4 nu2Mre6i3L7y5s9hTL4l4zWOhpTf/wGLo5uupG+XDbjIb7T0Df7r3Aoloq2V0W8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX3DzI+11+Uc9b1s00m6 nUMFnuJ2Ih39mkjQaNmMtnAqAUiXO54oNtmqlpH8Y8QGsW7aRHnFUGmRfZ+wwTBX fNGRqDo1+9l67i7AoFN1PH1iLcXqTbCp3Zds/acb4h6ooGpLdimzxhU/FtVbL5tG PwbF9IFGQiSsd6/oBpZ+fV2cTFt7miW6Pve20UvpzBIDmsBEsI8OMmopZcY5rrou lEeEH1i9Hmr/lnmj7E0ITPMaAvja3oYDsDdcyiXQP4z+FMIKzC248LxJQDMUfJYi tFat0fSsJuqPPwTr3OuuNgdZESQhmLAIwxnoGqFYQgqPq907c/whegN2OY4Jc54f EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 76799657325170508779597255827104994872 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:57:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:57:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karl-Wiechert-Allee 4' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 321' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00801351528' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Intellectual Property Office' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUI AG' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22911150152917777495349044080756196416370377881699340360637918733311027076739001626526834323654954336959058312049422161378091267522502219828143459299094889403423523721503187907980750656743321693456088976131026634364734708698783438277566522441516046465455388496646160356454961586390097344524110904325634560828604446821255226785103963297972921129828616321543936903334204218957250560099107112171408340624556245000749110336621180964102849268599354283149437767792372605512837828339054160337484909939067020479031709675712797090743881957718624202363988918380778708171336675316763375171376033520197303328248676783757889249043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d4f83c49444544177506c991fe8de3e53a52187b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2358 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) 83c2c1aa04832e1b85258cb2083450f11317e252736f3085280b02108b3a97fa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.firstchoice.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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