sts003-r.gever.admin.ch

- Bundesamt fuer Informatik und Telekommunikation (BIT) -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 7e:1c:c7:06:ae:9a:e1:40:1f:b0:a3:7a:39:61:be:dc:a4:47:09:b9 was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesamt fuer Informatik und Telekommunikation (BIT)

Organization: Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 7e:1c:c7:06:ae:9a:e1:40:1f:b0:a3:7a:39:61:be:dc:a4:47:09:b9
Serial Number (int): 719974595608047112921413113778335622888990116281
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: df:77:1a:ae:63:b9:c6:82:f0:03:90:ee:40:11:ee:e8:d8:de:d0:4c
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): fc:6b:ee:72:ca:a4:d8:90:12:18:fb:4c:15:1f:e8:54:04:a0:ed:59
Fingerprint (sha256): 00:af:53:c0:f5:f4:75:69:e7:0b:bb:dc:d8:5b:da:fb:26:ed:f3:c9:c0:86:dd:70:a5:12:9b:83:8e:2a:c7:80

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate sts003-r.gever.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts003-r.gever.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts003-r.gever.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for sts003-r.gever.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 719974595608047112921413113778335622888990116281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 21:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 21:50:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sts003-r.gever.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757861012300869734209943161078191940619168095324939352939553073173258067484375618004391739966670707926810989220721891594092376147131383451196143725303671917032336388356191508627679830426457913615052663007678141110022167079037029170014241550001661483524693981620684353875872324401014096853639462352961373951119573889150705029727688977584959486376535319601710609298202993406595605550432701027543049117597669018613445088165175195797862788551870767576586007204024810356419799748075097738750678610824775958506221359928193213789690642298423536543920238013706173987492296610710560444196046033123210810505316914632991658427817293555721470390829973528759581361120737352595174933007481309716038569534480166487637235602446861452735708558032592714923147156185807197293738943458083873964845496581344037335627220892992454031266534586361854897544292676767150058544268869506722198086891960585535301066316810271585896754670432064829540881785945670757481234123694034982469563350242977507747561032630299093397004470696192001244435519956700066519185263360327389035912397495721820206033825741356454349245527412722879973909679405003399627677570804720541394111736060277208880683158168867780497138763492710856511087411725708949677941195095217867743555790129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts003-r.gever.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df771aae63b9c682f00390ee4011eee8d8ded04c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018892bedbea0000040300473045022100a5c78657808c0acd5f29fa663aea66b1424a7a4c8e99c572ff86494dbbddd60102203b3e3c9365c82bb48acb13e5b669cf79c782fbea0548431f4a340e6992fff89700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018892bedb530000040300473045022100e95f62e5a0eaeec794d1a4896a6b20f2ef92f52c934d456ca2b185eb7eee1b27022014205f6b0e9de807d3ca7b25dcd9ed4fff870212f343c587cbade8812c905f7e0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018892bedc3f0000040300473045022034923ef736bf58913bdf41903baf1abe4c362d2676bf32ea1ae3d8d50cb102e8022100b73f9c907b6eed0b241c244f7a9536192087b1cd1f727bd70f8cd6cfd7e27c370076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018892bedc6e0000040300473045022100d428adaa957721c7fa3fdc21cb751fd2ebc7362593b7776a550f0f6f8006d38802204034e2fcd0d2bae7c5702b158e27fe1a5854189a91bbe5beb486fa48afa35014
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0057f0132ac2e2f934d0a540576540f7bcee335177f968c108d4773d28345c31106c9e32da4969b52ae2038e15e45dc0c52fe63cd4cb4de87925c98595fc8f29db9e2d695899aa8a739294f929879342527b8f49c4ee13caef4d2529ec89ca938c65f14d4276a85875dea8b0e57a30ffe09fd7dfa8cae622f01520843554a034c88b83d4241c53eac03212c74b92cf4a57754fef447ddf522f8be9d0c58e8523fefd082457f6547cdd2567d990a58b649b3923e95e10241eb169d799e33f68d534ef00e35c26e82d50c3db050ee7f103c510d4a3db6ce81fb7b0000b57a817847500a70db14443821cf078777ed7b6e17d5d60dc6d2159e8e70820e6cbfb8a0eced99ef4d10046b20906029b3415616c6e10ba423a1f894f63a625c4a6bf6c2bcde29f269db452eb902854ce1d013accab4eaedb8c83a52fb7a3877d9c6a03b9d43c7f545ed91251750ae1991faee6e008b6a1e3009d84f8731dfeb6eecac0503dfc82380c13f944f005b657bae2b6be0dc269136046ac9222bf92aa398900b9ac4188d708156e826cdd991dbcf29f587a9f1cdd13846231b1e585fbf7d11f32caa7cab1a9a22b23c82f1e07c8defb07f82d6f139d7e17588f1c453fbf975e2665dff1c3c6f5574c01ea8558948ac1fcfa576cab11da3689e9e58229a90ccfa951e95d09f586feaf19cb448e7520cf06e17b63fb7a5db9bde5713c3e5ca66a6b15