zubofi.apis-dev.post.ch

- Post CH AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 2f:bd:ef:59:75:2c:09:c6:5d:5c:c9:74:4d:f8:71:70:ff:a9:69:32 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 2f:bd:ef:59:75:2c:09:c6:5d:5c:c9:74:4d:f8:71:70:ff:a9:69:32
Serial Number (int): 272558257348459426901547383027023591526214756658
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 7d:8f:8c:60:ad:4c:37:c9:a2:f1:f7:4f:e8:79:ae:e4:33:16:53:e6
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 5a:01:e3:45:5b:da:ef:55:c3:ea:35:b7:93:7f:09:d7:6e:80:1a:a4
Fingerprint (sha256): 01:63:ba:89:87:e0:24:c6:bf:76:8d:68:6b:16:41:94:fe:f4:27:e8:ff:77:04:64:e1:2a:49:01:87:b4:26:f7

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate zubofi.apis-dev.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zubofi.apis-dev.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zubofi.apis-dev.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
patient.sanela.dh.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch

Certificate

The complete raw certificate details for zubofi.apis-dev.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwH1cs+G0I6mx2Wx1BXSG
yZSwNdwsHzlaWxTZAIqkei/KcnIr5UO2ydmQcKpy/0bsiMY0piWE+O3tsV7tnifU
5qoO9J8XkoRl4EyO7+w5+ic0St6alr722+c0PGvB1kAiCCKnBP+XyZqE48z5pT9s
W7g28+38J9kiW012giNbc33ae0+LPrwU8FSzkGebmKCcL73mISpcM6PLQ9258MAy
LYy0Ha6Z8tyJJcbVffDFSfEjMtv8XI1a0Ewo9nq4RlnFbSEJLeGPdcl5/iu42RJm
BBzJOle/x8uMy4iRUcMxsDdg3WW/F8MVJjvPS/2R/5tuXEfm2dik+cMvbs2Oa/bX
LeBBsoSo+E/zJ5H1E+5piPpoOA0xz2tGC044dh00wK5ShyKvg1PR//JITVQIZCn4
bMLdrwP6bcx5xY5F4mDtH6uJ/btyAPC/WQ0Dj1SFup1SY56uL5IH2LAirhCbDb6X
trjTBx0lWq0uDBXGeVpKvs2PGpscq1Kzyi4G1nI2a5lar4FCrpj2vum/F+zeQU/X
hgLLmQlbisrb9+gnjsbtvimGcDgjWZUKdv/LhstWUKzJidT9FCRx1Zr8DaIjbEsN
Sl/ifZlLa4SEzWQOunVAOE+DfXzGe5a3/ZmIbhHps/MJSFrdMZDaFJO3r4TQcYwh
ielBuVLk+X9lW0IDutfAvPUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272558257348459426901547383027023591526214756658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 06:09:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 06:09:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zubofi.apis-dev.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785289445545409388444821099852488941498684505953076486708826907700858879223669094719724215090437154995201059221248344376971651153513377364112951404256930605616861539333080126389989842879640421814539733963519369778463174120922762757858610790493372062941032903065460549034668485877199688560904095399153122067064810200536718590270323400072932425149517295604342438443340623353332768557305623264269175529590440273653516125189736645830961728810805795063327953610111161668442350646724187602989596035745038554545236777404872859886321032857855428239209869791771466975276992644357643955086941504369584784946228445703609584993474747647425760870858174134340173487828628983072329965033690437391842523000381981832996704055971047551602636549143253034479437051641072099411602684259838797443685421585465560673741876893178747310466884662496157359795017446967214817696081696804868464471268216860579722181197479006263215253260191065264178864943050211174503559222687680944599428351707074113189145179476820995641899844808764821585885166185897421369457425093571428812673716866041721891274888641372578586819942893963525353793630624877514755205170708680034492997748571707097890173519884400938071822696451212931557924684181565327380313711619148405739366694133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubofi.apis-dev.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d8f8c60ad4c37c9a2f1f74fe879aee4331653e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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