matomo.mpdl.mpg.de

- Max-Planck-Gesellschaft -

Issued by MPG CA - G02

About this certificate

This digital certificate with serial number 20:96:1c:66:54:02:c0:51:76:ff:77:d5 was issued on by Max-Planck-Gesellschaft.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Max-Planck-Gesellschaft

Organization: Max-Planck-Gesellschaft
Organization unit: Max Planck Digital Library
State / Province: Bayern
Locality: Muenchen
Country: DE

Max-Planck-Gesellschaft

Organization: Max-Planck-Gesellschaft
State / Province: Bayern
Locality: Muenchen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:96:1c:66:54:02:c0:51:76:ff:77:d5
Serial Number (int): 10084993301108264749099874261
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 59:50:b9:72:0e:26:e4:6f:24:bf:6c:96:5f:6e:51:0f:7e:84:51:d2
AuthorityKeyId: c4:88:a5:07:ee:b8:7b:aa:0c:13:bf:da:29:74:63:52:1b:49:70:16

Fingerprint (sha1): b9:e4:03:85:d8:5e:fc:5c:b3:ac:d1:a6:ac:df:90:d2:e7:c7:4a:14
Fingerprint (sha256): 00:6b:97:c1:a2:37:a5:88:3a:2c:d0:76:b9:4a:a7:65:3a:8d:36:75:89:96:73:b0:f6:6f:81:d0:a3:ba:57:4c

Issuing Certificate URL: http://cdp1.pca.dfn.de/mpg-g2-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/mpg-g2-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/mpg-g2-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/mpg-g2-ca/pub/crl/cacrl.crl

Check the revocation status for certificate matomo.mpdl.mpg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matomo.mpdl.mpg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matomo.mpdl.mpg.de

Other certificates including the domain name mpg.de

(limited to 100 certificates)
vweb14.gwdg.de
reem.mpiwg-berlin.mpg.de
calc.init.mpg.de
gitlab.pks.mpg.de
mpicc.csl.mpg.de
srzadrest-e01.vw.iame.mpg.de
porta.bgc-jena.mpg.de
gitlab.intranet.mpl.mpg.de
kanboard.mpimp-golm.mpg.de
ex-mcsrv1.mpe.mpg.de
www.mpl.mpg.de
s2000-proxmox2.mpibpc.mpg.de
tickets.mpl.mpg.de
shibb-staging.mpcdf.mpg.de
www-legacy.csl.mpg.de
idp.bpcentral.biophys.mpg.de
gv-events.mpg.de
matomo.mpdl.mpg.de
labfolder.mpdl.mpg.de
krapiwa.mpipz.mpg.de
*.mpib-berlin.mpg.de
caramba.bgc-jena.mpg.de
gc-ticket.mpipz.mpg.de
aruba-master.mpikg.mpg.de
nc.molgen.mpg.de
aircapdata.is.tue.mpg.de
common-objective.is.tuebingen.mpg.de
public.web.mpg.de
travel-magic.aesthetics.mpg.de
bcw19.sf.mpg.de
helpdesk.mpimp-golm.mpg.de
ccp-cn01.eva.mpg.de
chlorobox.mpimp-golm.mpg.de
svn.test.mpi-klsb.mpg.de
nagiosext.biochem.mpg.de
vpngv.vw.mpg.de
srzsysmanage1.vw.mpg.de
deepspace.ice.mpg.de
bfish.neuro.mpg.de
sally.molgen.mpg.de
musawwaratgraffiti.mpiwg-berlin.mpg.de
rubin.cbs.mpg.de
knb.mpiwg-berlin.mpg.de
voipgwgefo1.vw.mpg.de
vweb14.gwdg.de
srvgvexp-c02.vw.mpg.de
nextcloud.mpi-klsb.mpg.de
rubinul.tuebingen.mpg.de
mph.tuebingen.mpg.de
colloquia.mpifr-bonn.mpg.de
pubweb.mpi-inf.mpg.de
gc-web.mpipz.mpg.de.mpipz.mpg.de
sslvpn1.mis.mpg.de
lp-bookings.age.mpg.de
lnxsrv-0.mpa-garching.mpg.de
stories.mmg.mpg.de
mail.mucam.mpg.de
fhi-fpr-02-chassis.gnz.mpg.de
proton-vle2.pc.linmpi.mpg.de
atlas-innovations.de
vweb14.gwdg.de
arc-lin-cpt04.mpib-berlin.mpg.de
ftp.mpdl.mpg.de
ncatmaid.tuebingen.mpg.de
db1.aei.mpg.de
csl.mpg.de
desktop.ipp-hgw.mpg.de
intranet.age.mpg.de
www.cbs.mpg.de
prometheus.mpi-inf.mpg.de
resourcespace.mpiwg-berlin.mpg.de
s1020-dc3.d200.bpc.mpg.de
oc.rz-berlin.mpg.de
wiki-virgo.esc.rzg.mpg.de
erebos02.demogr.mpg.de
cvpn01.mis.mpg.de
voucher2.mis.mpg.de
db.arevir.de
npsw-www.mpg.de
ecocn04.eva.mpg.de
kyblab.tuebingen.mpg.de
pc-t6-166.mpipz.mpg.de
voip.ice.mpg.de
scinote.molgen.mpg.de
imap.mis.mpg.de
oak.mpipz.mpg.de
hlltwiki.hll.mpg.de
mail.ip.mpg.de
wints1.pc.linmpi.mpg.de
ds11g-dps2.zmaw.de
typo3-01.mpp.mpg.de
sciform.fkf.mpg.de
wiki.hest.brain.mpg.de
messaging.evolbio.mpg.de
auth-services.vw.mpg.de
extlyncweb.neuro.mpg.de
npsw-xedit.mpg.de
neuro.rzg.mpg.de
hilprecht.mpiwg-berlin.mpg.de
voipgwgv1.vw.mpg.de

Certificate

The complete raw certificate details for matomo.mpdl.mpg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10084993301108264749099874261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Max-Planck-Gesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MPG CA - G02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 14:29:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-31 14:29:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Max-Planck-Gesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Max Planck Digital Library'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'matomo.mpdl.mpg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695185831959784330011475450105718357554515083412280060612417897076813276895734746012154745434163649852573309162839971264172672552013497271064614949962987811476429165381203916258763282172666144011739407604680347849868398576902353208565528723192197403182022772771718982264014405508322778869544050353505188310020001361885817932326255734200734907041872782017609211926551545225273874373403381523883013487946340261534162935458582001547306229854635109171009395934601372165336891939948504945049581085512983132256352469841405289811199997690645926462630605474806703222389619470384344370863174261865687292612422514614253288431838691350896126136562928117727376978757607574302342137461364038253808374549981138974803038444182404300430535116911639218583712711344319800235836323129996162478220899927238986433080121327484730248814989061646172412753703317997101365389405967411026969022518364039094012932503608247669419682106546266457871004921537396553460486010794403835158112281523574128863670246871638656261867843796349075751031113487448407509530699552805716694592925121922244119269999671459059726653814471614553178084865041350910597498275325467301320462349380318001007261584522718288261316277752184475259693424016643490434565160783495401783833094787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5950b9720e26e46f24bf6c965f6e510f7e8451d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c488a507eeb87baa0c13bfda297463521b497016
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matomo.mpdl.mpg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mpg-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mpg-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mpg-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mpg-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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