surveys.scc.kit.edu

- Karlsruhe Institute of Technology -

Issued by KIT-CA

About this certificate

This digital certificate with serial number 1f:a5:0c:69:3f:a5:0d:5d:cd:dd:07:01 was issued on by Karlsruhe Institute of Technology.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:a5:0c:69:3f:a5:0d:5d:cd:dd:07:01
Serial Number (int): 9793566674590119611623868161
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 4f:c9:c4:a7:62:ba:a9:01:2d:65:c0:0c:80:9f:1b:b3:80:4e:f0:6e
AuthorityKeyId: 04:1a:bf:1c:93:91:3d:d3:d9:3d:b0:de:13:23:e5:9a:70:f4:2e:08

Fingerprint (sha1): 14:f9:57:66:3d:e6:c0:1b:64:00:74:0a:d9:74:33:2b:51:52:57:75
Fingerprint (sha256): 00:24:8d:cc:e1:7a:aa:af:45:c6:9a:aa:71:82:42:17:77:5f:0b:19:43:6b:7e:0f:1c:16:27:f0:6e:39:2a:b1

Issuing Certificate URL: http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl

Check the revocation status for certificate surveys.scc.kit.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for surveys.scc.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

surveys.scc.kit.edu

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for surveys.scc.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9793566674590119611623868161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KIT-CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-28 18:05:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 18:05:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'surveys.scc.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855752145502420075390528103168951357393644336423038333730961451862973496599885911381589668957103398391309667246099325275906541286048774565161331219136393177945612904592880707728183429218706686651644882568504090248741019987663326721514379357320767748915550833013891804083701850973659644191434440693272745829118891017288043541762015201818921621546949734144137420886851987998035811465354816435567879870496684389180943259889743246733201817595371738377525845652626017196160933803370152517490384280461485106567493440885904766028440616072824683032487442510282097056488273844898021290449017883156785617840228292200325021192975501051439543043317602657971040237350334181359880803925978729402578145495623887987732036175820946762505053036535061648521730694384179210805329648060254919657465651092168599902737413503115069523493917683141990190509368790278623097677581982939783290644542638771285145719645463856523899116886805952834096357899580060883992776452448139043000624950249476430896551822669029288495508898309623096096867953980306897486988126220508220118235139785375996554694093248493721509144276761108350039032968057170308547065408160305728580074373375930560615074570927238220691508004748193263858985628470255458396990893681363062477919708339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fc9c4a762baa9012d65c00c809f1bb3804ef06e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 041abf1c93913dd3d93db0de1323e59a70f42e08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.scc.kit.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (968 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (964 bytes)
							03c2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016581b6296a0000040300483046022100dc4af097121e4fcb53c42838af97a8eefa07981bf32921d465903da35c8681ed022100dfcf12133f489d07932cd8eaa0b2d4c6fdef5a7aea329b6eb86a8e45dca8e59b0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016581b62a960000040300483046022100bd4122b7464e6e0cbbc8c128a370afa6a71931bdf4c61a2f0a156fe784e6e55802210081408bdd248843d26ab7868625c601afca3a806fff9423c0642e8b49fb3dd9a1007600aae70b7f3cb8d566c86c2f16979c9f445f69ab0eb4535589b2f77a030104f3cd0000016581b629220000040300473045022100c896d0666d59c581a4cca3c01248bb9e0e01c2c5a0066b5de8aa4d9f4f67136e0220750c0272955208f2b54b9a22261ce23154c927d344b55c0e6f4e6a3b0c3b46d6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016581b62bb900000403004730450220531274b02c6498257ed5948a5d436ce21432c624e314a56b05dc48642e172a2c022100d6ac93351fd38974bba8c855336f7d732b2ff3ebd14bb6355a08f3e1cad339f2007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016581b62ba80000040300473045022047ae1448513ef91badd9776cfb560a4900bc2a0749c12645fbdfee12aba8f49e02210088a994105733e6c1f68ae83421b5083f55d8c88f836e7db39cdec35e53dc342b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016581b62b4e0000040300473045022100da26900b6376209508d693789ee33942aeafbf72b1011f701bd9b622d286c54d02206c6e264079cde5411de244fa858232496e17494ec893135f702bd676e753ffcd0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016581b6314c0000040300473045022100ef703916533d2698843b0ef513f6d3a85afda88bffc5164601970761f076e30a022003376abc6d341cf7f5619292a6fd4e724a99ee6bf300cf8a6ccf63c2a1ad17b00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016581b6319d00000403004730450220536b2648b09f34447fc4e5737846dfa7451b2ef68022b7e7baf0afe74774a67602210096f4c0741a8d6cd56a75ab9c3b695777f22b72497079db6d0ecf083e5db59ba3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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