DV SSL/TLS Certificate for www.chiesi.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the www.chiesi.it DV SSL/TLS Certificate

This certificate with serial number 34:c3:ea:04:78:cf:0e:86:5a:cc:30:da:1f:e4:4a:91 for www.chiesi.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.chiesi.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 34:c3:ea:04:78:cf:0e:86:5a:cc:30:da:1f:e4:4a:91
Serial Number (int): 70137100106378338741256728560061926033
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 98:2c:c8:fe:13:2f:54:30:90:a6:84:74:75:49:6d:db:5e:0b:17:28
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 64:9d:a6:7c:7f:4d:78:05:85:43:a4:4d:63:d8:36:28:ab:be:ed:a3
Fingerprint (SHA-256): ad:26:a1:5a:8e:20:06:a2:1a:a0:f4:89:75:08:d5:e3:f7:96:71:98:8b:d3:1d:1a:95:0a:b8:e1:cb:10:61:d9

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate www.chiesi.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.chiesi.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.chiesi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbjCCBVagAwIBAgIQNMPqBHjPDoZazDDaH+RKkTANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yNTA2MjMw
OTMxMzdaFw0yNjA3MDcxMjI5MzdaMBgxFjAUBgNVBAMMDXd3dy5jaGllc2kuaXQw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLuKDDCXGGWQCC8BXQ8oj
G/sJ9b10oc7R6b79llORQkUIpWUN2zFgTVaDauj9nJw0sPAHCA6KlFT3b4eSVWsE
DEV6zJSLeC2WqHc0Q0nZy8m4Pb1gKZt9niSEJ61MWbpTInBRrxr4aUB6B8158KwY
06rwqk8Fdtam0NYTl7GFxMLNWrJuON7PUw59tq9NouY9C/dLV/sNObR7cZVseGFJ
QW1V83rxO37jLxSS37zEbiCCbgUsX7GhHD9Ax231hGqW+4rJ1znwh9Z+jluRgBHj
KIs1y1dhubTCAxlOizUcGhWXtlVIfXr1QLpnNaXriCCs+fYfrTr2qeIpCxNqEbiz
AgMBAAGjggNFMIIDQTAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFEKDbYB8CYRn
/YBXq/Em9XfIIoJxMH0GCCsGAQUFBwEBBHEwbzA6BggrBgEFBQcwAoYuaHR0cDov
L2NhY2VydC5hY3RhbGlzLml0L2NlcnRzL2FjdGFsaXMtYXV0ZHZnMzAxBggrBgEF
BQcwAYYlaHR0cDovL29jc3AwNi5hY3RhbGlzLml0L1ZBL0FVVEhEVi1HMzAjBgNV
HREEHDAaggljaGllc2kuaXSCDXd3dy5jaGllc2kuaXQwUQYDVR0gBEowSDA8BgYr
gR8BFgEwMjAwBggrBgEFBQcCARYkaHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9hcmVh
LWRvd25sb2FkMAgGBmeBDAECATAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDA2LmFjdGFsaXMuaXQvUmVw
b3NpdG9yeS9BVVRIRFYtRzMvZ2V0TGFzdENSTDAdBgNVHQ4EFgQUmCzI/hMvVDCQ
poR0dUlt214LFygwDgYDVR0PAQH/BAQDAgWgMIIBfwYKKwYBBAHWeQIEAgSCAW8E
ggFrAWkAdwDYCVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5yu0VLFAAAAZecKijB
AAAEAwBIMEYCIQCCrKUlTeRhYacbon9kApOqeCO8w1JUzWzAuVFOYWmgpgIhAOKH
HsqZzXHeAKrg70EOJOxM5w+I4Ow9fA2N8GglGKaKAHYAlE5Dh/rswe+B8xkkJqgY
ZQHH0184AgE/cmd9VTcuGdgAAAGXnCopYAAABAMARzBFAiBWihVjFSLXVQk6kig6
e8utiyH+y/EGOVi2ffP+JDWDQQIhAKMcls8Q3MbULnmzo7MWHtRZoQ9YC2Gyv4SE
F+amiuzRAHYAlLHBirDQV8R74KwEDh8svI3DdXJ7yVHyClJhJoY7pzwAAAGXnCoo
5AAABAMARzBFAiEA50VCRfJHPtCl/Q1Oyu/7YEsg/cR3B+uCTzGn+CX79rkCIFI3
D9qo7ETbSTKRPxnrMqyADmPDSlAQqKA/9l0+CEnlMA0GCSqGSIb3DQEBCwUAA4IC
AQA1qg7NOIo29qVUlI3ibCm8WWwKY2asNa0x7+EJmtzP8NfjpAunavDP6K/Mp1hj
jwEaEIU+DR1y+553PtGhHZGZlvuKhVckg4rGosLn33b4IHrRxSIk7N+s1lKZjMDO
5oDShHx1uzAaylGp3HhL66AhLoCKuA4ee8iFgfiQtYA1inL56+/5NoyqxMLMnWLL
awMIX+Yv/HRi/NFf+ASvxRJUgL8AlUMPvLgfV/v2o4hf0DgMF9pGC974SYYoIsw8
X3ybCA5AUT2bku0e8ZBug+Kvmc6bEkqOBs3W7riEr5p3+P1dRuxkywjwrPkxEbgp
2GXnNIkoX8ijUFGswLhYFJjkWRCfFvBLOKV7Q7/fAJ3GgXgplu8648gLoTCu0y2A
PAbl4AYA3y2Q0sCLtXOMgcYWHsgv3+uFFx2VVuvFdQk/Dxbgw+vHvrC2rH7KpjZ2
mRhkRA5Y8fCAo7NgN3yIOzLgZeucR+flHKPl0rlNDH/9yHterSCYJqVFKYYdNoX8
GOdQ4ZofD5RDkFR09bM4mQj6Sjx4mw3/OEIfZy2YZys96Oay57fpY9NvVOTl+tdI
TW05mLk8r9j4G4NEgIJqUKLYyyWJ+Gzx9EvSDTn9tECai7HExg8ozwhJdGxM7Hy1
Zs0t9v7XOMj8GlX1pOGI3m+pF65QCAGrXvIx/d3+zl9iKQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy7igwwlxhlkAgvAV0PK
Ixv7CfW9dKHO0em+/ZZTkUJFCKVlDdsxYE1Wg2ro/ZycNLDwBwgOipRU92+HklVr
BAxFesyUi3gtlqh3NENJ2cvJuD29YCmbfZ4khCetTFm6UyJwUa8a+GlAegfNefCs
GNOq8KpPBXbWptDWE5exhcTCzVqybjjez1MOfbavTaLmPQv3S1f7DTm0e3GVbHhh
SUFtVfN68Tt+4y8Ukt+8xG4ggm4FLF+xoRw/QMdt9YRqlvuKydc58IfWfo5bkYAR
4yiLNctXYbm0wgMZTos1HBoVl7ZVSH169UC6ZzWl64ggrPn2H6069qniKQsTahG4
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70137100106378338741256728560061926033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-23 09:31:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-07 12:29:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.chiesi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18075197372690776964865382282216548172639494855058562713308816604671041240020991835515791374283956813747073239942861383030720513835294326055523888651162781523632429531762828249290152045738300439658577080889861713461628307090973154457744195331416331290150526622728132881337054563947202321813756204476837452653690419234832203792258578061041896694651901969579274785647290750827493607696468484818385458034070277204866981111692739396147273369513926137188442021881299554624130200611020278609779939506257103630873351897704192439551693899813656285407037892359635129798554462405255847830236200452100412945074522939101071653043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiesi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiesi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							982cc8fe132f543090a6847475496ddb5e0b1728
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0035aa0ecd388a36f6a554948de26c29bc596c0a6366ac35ad31efe1099adccff0d7e3a40ba76af0cfe8afcca758638f011a10853e0d1d72fb9e773ed1a11d919996fb8a855724838ac6a2c2e7df76f8207ad1c52224ecdfacd652998cc0cee680d2847c75bb301aca51a9dc784beba0212e808ab80e1e7bc88581f890b580358a72f9ebeff9368caac4c2cc9d62cb6b03085fe62ffc7462fcd15ff804afc5125480bf0095430fbcb81f57fbf6a3885fd0380c17da460bdef849862822cc3c5f7c9b080e40513d9b92ed1ef1906e83e2af99ce9b124a8e06cdd6eeb884af9a77f8fd5d46ec64cb08f0acf93111b829d865e73489285fc8a35051acc0b8581498e459109f16f04b38a57b43bfdf009dc681782996ef3ae3c80ba130aed32d803c06e5e00600df2d90d2c08bb5738c81c6161ec82fdfeb85171d9556ebc575093f0f16e0c3ebc7beb0b6ac7ecaa63676991864440e58f1f080a3b360377c883b32e065eb9c47e7e51ca3e5d2b94d0c7ffdc87b5ead209826a54529861d3685fc18e750e19a1f0f9443905474f5b3389908fa4a3c789b0dff38421f672d98672b3de8e6b2e7b7e963d36f54e4e5fad7484d6d3998b93cafd8f81b834480826a50a2d8cb2589f86cf1f44bd20d39fdb4409a8bb1c4c60f28cf0849746c4cec7cb566cd2df6fed738c8fc1a55f5a4e188de6fa917ae500801ab5ef231fdddfece5f6229