webservices-cashlog-int.post.ch

- Post CH AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 35:fc:9e:df:9b:fa:4a:3f:1b:31:99:2a:e6:64:fd:25:61:27:69:96 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 35:fc:9e:df:9b:fa:4a:3f:1b:31:99:2a:e6:64:fd:25:61:27:69:96
Serial Number (int): 308210138475168172763667777209920808673228581270
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: c1:8f:98:d3:78:61:0b:81:28:3c:35:4d:40:b2:08:b1:72:f6:f5:e6
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): c1:62:a2:21:74:be:cc:b0:69:81:1c:d6:ca:1e:08:df:c7:fc:6b:48
Fingerprint (sha256): 02:06:0d:34:95:0c:9b:8a:4c:e5:96:36:84:82:03:ec:f4:51:80:16:46:32:49:4e:c0:60:0f:58:26:05:a0:2e

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate webservices-cashlog-int.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webservices-cashlog-int.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webservices-cashlog-int.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch
www.post.ch
service.post.ch
opera.apis-test.post.ch
address.apis-test.post.ch
news-intern.post.ch
awsegpf.post.ch
mapservice.post.ch

Certificate

The complete raw certificate details for webservices-cashlog-int.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxkLrs6x0ArPpRQGknm6E
m4epR3cFazwnR1gBYwD14Tm0JriJf2p37ZfzXQIbcOQPpCi3Hk8+LDEqPg23C593
ni8dQ0KVYvcccOkrd7XpfyYWlY28MwvQmFUxldD6J6hAlDh/kvon982dSC4T4mkl
hI3KYsKA1Kckk/BziFn8mk+vYqwALuszfGMAfHBvRZA8FPFqHImdbz788/pJW0ln
x7VmOfAYP78cshrHfY+5ZmHGL64rOINv5FMB0Qf+K881ZB/Doioc+Bi9z+t46FLv
oce6jjaiuAG2sAkdMiV6jiQZlxBr13+gXPL9uFhUll3GHBQY4VTS3NWxeRQMU9lS
stHHuTXbv6zxUHSXrKyAONN2C6U753M+Q6FNRZWlzrJdT8XonMnEfZlupqRqTYPF
s6CYHj/IgMt0LhL/40DA0S48oduZFZ5WjdeX75GhFTwGNfft0kcpQrvlpz/B7d4C
Rkpd723dJLLJRMV5lrb8tRZPOXn4ZvZN+ZyGTNzKjzjtTi6llCEYqcz44mRlkIgZ
6h+PeBcqW0Y0uy2wqOI3O9voeTtOuCw/5EwRZriVj8HRHQLY3aGyOhLaNGaoAfG8
EIJ1Ryvn6XeEJiKKIs2mMz4r6IvQu4RX6BZB/QEi9vki4uzwnqz76MRJ5W3PmYc+
peBjZ3i7a9GM4OXTrq3QL3UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308210138475168172763667777209920808673228581270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 13:54:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 13:54:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webservices-cashlog-int.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808835981245392398038680042311476614872124264627306539638485699122196881396146091683440394283221918027163948387695241599025031993464612100615830387592733713496603299213441248146416321129575574815558239380073097678675585388269250549163635241023074312770408698733512429227234859177811260295607643515988107073418064320430295503802936909215572337911362483258466603761971868252792402378702492118792198078598492953290941884728236366873705992186266617799200383611599059319708999393521186905497424400293274168594218704941418135024632693724897105953674000421884230685844423656300509137393340953663664017424354898484950704337317629304150784592211870484260443050578226484154872911071479723809622210358370840802778404921994047441831856308484200353097965711869661127239433136305935045342349093487333492403341820984758704885035114189963156303169451116708523285580713878678049471764634551949746700431865894138311974337196023127968736893567061854041587912976881576535662358817661791569110153971728263219050667197465987338600065660916549325981738184506684805526046374153131360142572841012601601058006309030789125344472853344913079032253876249728890953290566718908704920239873720491336188228109430020525800222423894873046980081521053096057602340564853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices-cashlog-int.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c18f98d378610b81283c354d40b208b172f6f5e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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