apis.sem.admin.ch

- Bundesamt für Informatik und Telekommunikation BIT -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 70:3e:f8:02:c6:c0:43:72:ac:df:4a:7a:bb:cc:34:8f:29:3c:49:c7 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesamt für Informatik und Telekommunikation BIT

Organization: Bundesamt für Informatik und Telekommunikation BIT
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 70:3e:f8:02:c6:c0:43:72:ac:df:4a:7a:bb:cc:34:8f:29:3c:49:c7
Serial Number (int): 640811217326240167901139983393988578079902812615
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ef:3d:28:36:38:2a:b1:51:36:b3:d7:2e:38:8d:21:99:f0:92:b9:34
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 64:38:55:32:8b:50:1a:44:b5:e5:9a:0d:a8:98:6b:4d:bf:26:43:28
Fingerprint (sha256): 00:67:68:cd:20:32:79:2c:55:dd:c5:e1:61:fe:f6:e9:3b:57:72:5b:7d:ec:7f:7b:6f:27:e7:75:b8:2c:88:8e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate apis.sem.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apis.sem.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apis.sem.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for apis.sem.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxYedH6KyJavoyvNLkEHw
YeKZQNaeOZCsqa4XVHTUbKJfNib91bsU5X6wlqHdX+UOICoOw+qZkLuTATUDCkeX
ECI/jFEt5NIhrs22Vuom9jtHtNK3vyytaDpTFFA5AxovtPeM69B1t4X/ybf2bY8/
NFko0X4a8ON5FWbqyx3fYmRLHgfjc2/FJe0DgHHqLgd/MCaxAI7chJSaugUCClaH
EdChU/7mCWvjIHmJfRNCOyyGWVgZgYFhUUp5rvBUwc5TJiPQRNcrJTE/kHLVUQnY
JDnQR5MAbXYJYBKeDFoPkBvLzfnLbKY2+RMTxntSMMSJrbyPdxcn0xUH52Km5ous
3NVCyaI+EfyE31ahlxutIjWeAn2SLpAl06GPmn+xIUlx+eqaeHuuDkRCKxiEn2gq
KrON/GjZk4FyAXFxsdSqWxceRADvqAUOcfJVhJ4DKA0vYI4w8yx/lec18ylzzpSo
ikXbiBEGwKD4MaCVUUWOL3Ki9vj6mV8SG4+zK3FrIgBJgw50B+fJkZ8hfANHmpnO
BP4EPlCsVUVvF3ZPnMzoSXgxzWNFJqjrtJMBDYIP3CoLIcJNYlo/snvkfCuFDcUO
CsoqSTt064aKtvDZZk80HDjZa/UqeReODjzMYjwq0dOpXkN6m8okm40ndSiTzQWQ
HFDeNLKftu859krAXtu5SeMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 640811217326240167901139983393988578079902812615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-23 14:59:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt für Informatik und Telekommunikation BIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apis.sem.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805851037211377708335212726080940727251073065047461798663635910481634006320044814453026604233549574644157813302062981299511910111794366740172010978763095571736382713458992922525994847963371434935171359136213655486379111446182555064841875094095455841531816888679489499247538597774705487643345327608236773097720609634330283535740647903387543680377736900025428650221719772436899831314756314944211607966291201534120417205757316799524664610670208292750787966734958857920830810544284642086630387637747042096150713666238719305434432201680426583364441375111976515501862876145547654293767718316103893218861058918109705782351342625451161571591474096379126925989690938069160128395856741904458790419421066816118736344574856674805605321646665069326305307508340620490181623317375707901054027045555828998397711796416319259829042148412952871605421405389849868440977437355751583666401322624463782572461774205528245524645411795181628195925156156409839473322572975051185960424366474335464899549929053007347504921337612734161237751011996447377253304165678076348876863104563463014710698567719905160742737394690643975213908705285182306315121592074427738319160531771186910801983704967041384445364231805982184734167142186109892480150201954013837340672870883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.sem.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef3d2836382ab15136b3d72e388d2199f092b934
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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