directdayint.post.ch

- Post CH AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 12:2a:58:c4:83:84:a6:31:a3:92:eb:d4:05:ec:b2:c6:65:61:f0:a5 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 12:2a:58:c4:83:84:a6:31:a3:92:eb:d4:05:ec:b2:c6:65:61:f0:a5
Serial Number (int): 103706197924490930459733251103804940927759413413
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 25:16:79:2b:21:e9:ef:f3:5f:4d:54:37:80:cb:d5:85:4c:23:bb:e0
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 3f:f0:a3:fe:88:39:f2:8e:bd:bc:24:a3:0c:8a:e9:40:00:b1:d5:44
Fingerprint (sha256): 02:3a:fe:3f:b5:d4:9a:59:46:a5:e3:02:fb:b1:f0:32:e3:6a:bf:f4:06:da:6b:9c:4e:ca:a5:6c:a8:67:7b:d1

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate directdayint.post.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for directdayint.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

directdayint.post.ch
directdayint1.post.ch
directdayint2.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch
www.post.ch
service.post.ch
opera.apis-test.post.ch
address.apis-test.post.ch
news-intern.post.ch
awsegpf.post.ch
mapservice.post.ch

Certificate

The complete raw certificate details for directdayint.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsR0TGEVPZZwtUPr1q+DX
nNh6CDcWExJcBqvU6Pk6dPrblZWD3XoRJpKhx/a3GBpUJjEym33rC9UYY3eTeknc
tTpQ82U3h4ZxtcJ1YHm9gMa6WF4kaTsM96e7AvVVlWQ8ZeEDRHz55Hb8DSYyUaPt
aTqN5CIyGPzF/Z9rYT6f0X5goOgUzcBHkCTLCHSDSn3X7eKzQJ0VBB10YGXWwWF4
UtbEhQCFHKo+ImEDQtMJexKH5hTsTu5giQBvOv7JnOpBsgSVxqrqAk62CmhVMeu5
wodXwUAMGqRaohXjoBmzEHK/VI53dh12ZaLBxsj9UZ6K0LPfv/ZpRl8/SEbbua6F
zb28wnD4jfGOX8rwMaEpq/JakK53JeWRLWM0rs9J00mSHhYEO4H15GCDP+/rXF1T
U0foKXUzJlmjZZHDUpICjVwLINfcQJcZj8STQlqgrc5qq3glWe46G/9ivzCPs8XS
rtT2ePQiO7AQLHOM9tBxNlxMv0pJLWpF+Z69azBXsSFvXj6grlt3NhPX5dgunTUJ
6NLR1uwMk4Ch3q3XBkBKSyjoLFywS0x6FAmr1jouxOCuYxNIrpzbbJdVKKsSszMo
6fVvvAJFotVKb9JjS4TIxX5QDz2F5QUwJRsGkGwUBT74yVcsn7MEejhGEqgokbSv
bFAOX5cO2u/gPpf74Nj64tECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103706197924490930459733251103804940927759413413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-24 14:23:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 14:23:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'directdayint.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722560335879093288053474498134656851718295069652447485984634727155436584391712545320853022462517059682550510281057905942484510074982624325379751490205891581642922349778480674881544336499581579371260498153946804041801683627740410991429063285169476173979048740985415194135482900706227945257231505965289615245387945777716842417804948147708916465604022943193866431763780068413675666163073792851665123776241617932278417827490908499919390553709458716216507220659434681417952733310216733559395878540482142952889554695648539295091596535128545548726167284361587704319091004700864048999532502595165225707620275416450443554054833872456080132432111354062705847364749733983676604012995497422820969237387360795562958485201524380706200018784774778440007184940450542895739837218685146701729287732357130438942917165724805105960538045175837770306463007898646626459669976656854264543194541756653755331775200415986406807780282948550831795352656323787080266455148822370789046327356680267413442983264902316499130778745572691088685998809049350850803050403010191193721168289804214931914791109776473267431345405304842368839989095743510112485609214058775781966166389308820643324358736676307687500108301697433952301986464542346733511330266906704419129130672849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directdayint.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directdayint1.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directdayint2.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2516792b21e9eff35f4d543780cbd5854c23bbe0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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