www.marche-restaurants.ch

- Coop Genossenschaft -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 54:ca:c9:40:78:f2:69:d8:5f:2c:84:f5:a1:ec:3d:de:95:6d:2e:d1 was issued on by QuoVadis Limited.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Coop Genossenschaft

Organization: Coop Genossenschaft
Organization unit: Informatik
State / Province: BS
Locality: Basel
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 54:ca:c9:40:78:f2:69:d8:5f:2c:84:f5:a1:ec:3d:de:95:6d:2e:d1
Serial Number (int): 484077506787615514789513649979519512384614772433
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d0:1a:49:7e:a9:1b:b2:9d:64:a1:13:a2:85:62:ce:36:64:ad:c1:39
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 54:f8:0b:5f:3f:4b:da:4a:87:2e:38:9f:1f:a0:f7:f2:9a:0a:35:22
Fingerprint (sha256): 01:72:22:ad:4e:7d:d8:00:78:5b:a2:e7:c4:a7:f7:1e:7e:96:01:91:46:c7:6e:3a:8f:57:04:73:66:d9:c6:47

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.marche-restaurants.ch

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marche-restaurants.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.marche-restaurants.ch
freshcard.ch
hotel-bellinzona-sud.ch
hotel-benjaminn.ch
hotelbellinzona.ch
hotelbenjaminn.ch
marche-catering.ch
marche-restaurants.ch
marche.ch
mrs.ag
www.coop.ch
www.freshcard.ch
www.hotel-bellinzona-sud.ch
www.hotel-benjaminn.ch
www.hotelbellinzona.ch
www.hotelbenjaminn.ch
www.marche-catering.ch
www.marche.ch
www.mrs.ag
www2.coop.ch
restaurant-cosi.ch
www.restaurant-cosi.ch
cosi-restaurant.ch
www.cosi-restaurant.ch
pasta-cosi.ch
www.pasta-cosi.ch
cindys.ch
www.cindys.ch
cindysdiner.ch
www.cindysdiner.ch
cindys-diner.ch
www.cindys-diner.ch
cosi-pasta.ch
www.cosi-pasta.ch

Other certificates including the domain name marche-restaurants.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.marche-restaurants.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurW73DjZ83BObnY+us2G
E5TM0LrJR4khYGNeFHSp6MXdz2r03fZ9ZvXycgtf1ChZu3YxYXjM6eaMG1ZA0FV+
L5zElxDOMHz9ewQ9hE7tCzebyyhru+IbZkIt+fIaredas0MJa+QCUORWWCeUBQaR
bXHp/PI988c4pEZrJuPKbpgSuORz4J9x+Cz0Af+CfpycTLJoZ6rLxkmvBY1ESf7u
KI49iq0LE+RozX5VPruxGXXCzFo4LWVsN2fH7VFPri/ZvSjN/4xkdyvTH5YPR2OZ
Rusbj1DSPW8+g5hjb4mmDSQ7EteMSPd6P9vJ+F1fpVHzQWZGcshVRpoicZBf20RV
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 484077506787615514789513649979519512384614772433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-07 05:00:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-07 05:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Coop Genossenschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informatik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.marche-restaurants.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23569941014847317385057022060986330867597057447660703450895010333363862030688010912060132416180633966536035028807044047792995960977299526491055558552260126885233234675900936609625587545870016685701730757384635679243844970655706891984889917901218136786659201629844791933313200427405606100073059668131370547569746317057069222226562251339778941416105692293575647588276932512636345677654247261927105018138763415150701850720887035153608777714486387471851134877200472239280890825098508363144311205846715214473081655337604971847921988382316396658833613910603648335481590096882835113257606231383325582538901011167548713227679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marche-restaurants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshcard.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-bellinzona-sud.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-benjaminn.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbellinzona.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbenjaminn.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marche-catering.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marche-restaurants.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marche.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshcard.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotel-bellinzona-sud.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotel-benjaminn.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbellinzona.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbenjaminn.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marche-catering.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marche.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrs.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant-cosi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant-cosi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosi-restaurant.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosi-restaurant.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasta-cosi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pasta-cosi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindys.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cindys.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindysdiner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cindysdiner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindys-diner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cindys-diner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosi-pasta.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosi-pasta.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d01a497ea91bb29d64a113a28562ce3664adc139
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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