chat.projuventute.swisscom.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 6f:08:e9:ca:25:ad:43:30:1d:d2:0f:cc:62:bb:6f:13:74:05:58:18 was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 6f:08:e9:ca:25:ad:43:30:1d:d2:0f:cc:62:bb:6f:13:74:05:58:18
Serial Number (int): 633896747472775716276242211288480580191553673240
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 4c:f4:de:b2:47:d5:43:6a:99:5e:5f:c1:24:bd:84:47:78:bc:d8:cd
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): d5:18:b4:c6:94:c4:66:16:a1:09:98:8e:92:95:bf:98:ea:b0:9f:05
Fingerprint (sha256): 05:88:2e:65:62:91:ee:de:b6:3a:eb:df:8b:67:e5:ac:64:80:23:63:f2:42:b4:c9:b9:e7:25:bf:ac:de:59:0c

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate chat.projuventute.swisscom.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chat.projuventute.swisscom.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chat.projuventute.swisscom.ch
www.chat.projuventute.swisscom.ch
webrtc.projuventute.swisscom.ch
www.webrtc.projuventute.swisscom.ch
osccweb.projuventute.swisscom.ch
www.osccweb.projuventute.swisscom.ch

Other certificates including the domain name swisscom.ch

(limited to 100 certificates)
olr-stag.swisscom.ch
cms.staging.entertainment.swisscom.ch
email.swisscom.ch
cp.cspp.swisscom.ch
spscms4linux02.exotrack.swisscom.ch
tvnow.swisscom.ch
internetbox-nas.staging.swisscom.ch
issue.swisscom.ch
secure04.stage.lithium.com
blockchain.swisscom.ch
partner-authz-staging.swisscom.ch
netzausbaukarte.swisscom.ch
magazin.swisscom.ch
i.swisscom.ch
docsafe-beta.swisscom.com
twint-prd.swisscom.ch
ssc1.imst.swisscom.ch
octane.swisscom.ch
*.portal.bankinghub.swisscom.ch
gaia-gateway.vega.m6s.swisscom.ch
iot.vodafone.swisscom.ch
sbc1-emea-che-zhh.teamsa.swisscom.ch
ccs.join.swisscom.ch
*.tcsbc02.teamsa.swisscom.ch
multi.swisscom.ch
l2.shared.global.fastly.net
bcs.join.swisscom.ch
secure05.lithium.com
wast.swisscom.ch
sdx.swisscom.ch
identity.phoenix.m6s.swisscom.ch
ccs.join.swisscom.ch
l2.shared.global.fastly.net
global-portal-dev.swisscom.ch
l2.shared.global.fastly.net
btbcs.swisscom.ch
tools.swisscom.ch
l2.shared.global.fastly.net
ssc1.ims.swisscom.ch
internetbox-nas.staging.swisscom.ch
lite.m2m.swisscom.ch
vimaphet-dasbc1.joind.swisscom.ch
extranet-acc.swisscom.ch
extranet-int.swisscom.ch
shop.swisscom.ch
secure05.stage.lithium.com
internetbox-nas.swisscom.ch
media.oid.swisscom.ch
5670976570261504-fe4.pantheonsite.io
acs.joind.swisscom.ch
secure04.stage.lithium.com
dis.swisscom.ch
wrc.joind.swisscom.ch
*.tasbc01.teamsd.swisscom.ch
sensu-backend-8.exotrack.swisscom.ch
simple2.swisscom.ch
secure04.stage.lithium.com
5754818358411264-fe2.pantheonsite.io
issue-int.swisscom.ch
l2.shared.global.fastly.net
wmt5443.conferencing.swisscom.ch
check.swisscom.ch
clientrvk.testweb38.swisscom.ch
tpe-staging.swisscom.ch
marketplace.bankinghub.swisscom.ch
inone-game.swisscom.ch
check.swisscom.ch
dns-vetting1e.map.fastly.net
handyhilfe.swisscom.ch
secure04.stage.lithium.com
hpalm-app-prd.swisscom.ch
cockpit.dev1.swisscom.ch
secure05.stage.lithium.com
rtc-dis.swisscom.ch
het-cds.swisscom.ch
mds01.swisscom.ch
www.survey.swisscom.ch
wfmweb.swisscom.ch
tv-thankyou.swisscom.ch
inone.swisscom.ch
buyback.swisscom.ch
secure04.stage.lithium.com
stag-messagingproxy.swisscom.ch
secure05.lithium.com
oms-tst.omsaas.swisscom.ch
cockpit.swisscom.ch
vergleich-server-cloud.swisscom.ch
buyback.swisscom.ch
hipchat.swisscom.ch
regapi-1olb.swisscom.ch
stream.swisscom.ch
repairmanager.swisscom.ch
robotics.swisscom.ch
zhheapp-sasbc01.joineapp.swisscom.ch
git-test.swisscom.ch
5754818358411264-fe2.pantheonsite.io
acs.gated.swisscom.ch
www.lawe-network.lime.novu.ch
chat.projuventute.swisscom.ch
cw000130.exotrack.swisscom.ch

Certificate

The complete raw certificate details for chat.projuventute.swisscom.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 633896747472775716276242211288480580191553673240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 12:44:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 12:44:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chat.projuventute.swisscom.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879645968280598026130895036427249540541891775097766851138204414537674008331465612743417015843244561599410464665579833535865228164457766423574818301256414556490131783286961593130164908952464968091395010427367499904156034615297579862221089225198299112337201820120222116168379194365908468751463572535579820357868513372037681913205478457035445878980216654154794152273515161859703026838087892891450778182799911436128323040599569249488125889306165733702455710928243569952319989928416933367409356109187841850320285166183401324409672861295970483531954338937998670269683644617298417715945871553316217773403482359037058940072753955179199474923732758856491492212202071200746415548832880540431501974507265180991872522568698027977402115432136732124940362189566327701785062837348852111718434945280018610814874086194590133747406762988119260625451997419333303913692594194735827783981352914688086327537169559218675232447931648153362759117143037397756394029045730073733729546648328022878244547178086713168403453185668290793042753165441642756971408896773950212338424434960391762521112150528797436224733489832287825910909398602220163419975491554599935569413925265226106234952920873300788180351851945568868876858992495432468575187710671330330992215744091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.projuventute.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chat.projuventute.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webrtc.projuventute.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webrtc.projuventute.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osccweb.projuventute.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osccweb.projuventute.swisscom.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cf4deb247d5436a995e5fc124bd844778bcd8cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000189f413762000000403004630440220352c1fcc017808d889f1c5abab01304074eb860fa46b5b5050abc8c92cc61a1602206275602b11a6a96980b9ffc8f98bf759b58d6f3ee507c28d8e9a52e2504ef80c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000189f413752c00000403004730450221008e86d52e127ff0a63603763710c5faa21350c273130f78f7dfedb148cbe9510c022014cc43d8c76ccb05724e9b7d27aa9e31932d10306d5f6ba1513aaecdce56891a007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189f41374d0000004030046304402202d818d0b36502e635c6a19a8a11a51a0ac91d0610b2305702aab74cd596d0e6502203689c3f6a578f8dab4f6bdbbb26550549f37367cf2fabe16eed53f06a5b36161
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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