plano.postfinance.ch

- PostFinance AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 1c:c6:21:ef:c7:11:32:3b:c2:9c:ed:0c:28:12:8d:aa:6c:35:68:b8 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostFinance AG

Organization: PostFinance AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:c6:21:ef:c7:11:32:3b:c2:9c:ed:0c:28:12:8d:aa:6c:35:68:b8
Serial Number (int): 164270245429903671315949132592508049987036604600
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 9b:64:21:0d:bf:ff:03:a4:ad:b0:fe:86:dc:f3:d0:77:1e:77:11:10
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): ed:2a:f9:ed:2a:21:87:09:3b:d4:c6:ab:9c:ef:d7:c8:9d:c1:31:9a
Fingerprint (sha256): 05:ac:31:62:b9:52:ee:3f:b8:4d:53:b4:43:2f:8c:ab:62:f7:4b:1a:ae:fc:2b:d9:7e:f8:fd:b1:33:9c:44:8a

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate plano.postfinance.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plano.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plano.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for plano.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0KTY5h2PQ6oY9vDW9n5
41yVUtxf3pML/gBSkvKsgwno8F+zjXmWeWM+GVwbJKxnFgyaRfVKQMSzrQSCBGfN
8n7Nog7E5krX03G0kJoDoEPIXezWS0gNxpOKNQDqRukolvGyw5UD06+n/QcKUdlB
BkgGtNRyvBxV0BRwP1Moh42AwZ3woQTSzpjqSsgon6NwAkdbwVR98r3uZYd0HYEi
BJBvRFKfRIZfro3tbzkB003vHLQ3pP5+ioMHuaRzDBNAg/s2AYAiEPd2eYGhN1LC
GKwvt7no+cG/1YpkZSLJP38lDFm5+6MLCEsgMMjzHQ95WuqulHp53SCgLDQKXcFQ
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164270245429903671315949132592508049987036604600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-11 07:49:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 07:49:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plano.postfinance.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25659205628323748367871295454900711499477063982694251457937833842125908767892847804958446386802015605937918258089704259196882176605977785285240844848230183367396975500280371589933543540339043305871169577138819537225291507770255085180910181655526991544348398853474139778891192017695042701975084878120219405213160384970313563294380635964645883758807576738367537685172919464115362104859145375095364410916255448376988344936289348522447895262462962297154423258143132694916656859050544991431570784883589931872490323151421485707097769005949618208625822329462388459467445062805469934020451812342172223478748281666167042560013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plano.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b64210dbfff03a4adb0fe86dcf3d0771e771110
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (720 bytes)
							02ce0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001828be102bb00000403004730450220672861ded8c58432a8e21678047910cfc62ffdb8112e7d066d8eea63208374e0022100a7d891380afbd64f3d5660d31ae586da7aa5847882f7ab7bbc9fa4c7713237400075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001828be1018e000004030046304402203160d8bbb527311be75e578e99847c74cfef063de96335e96aa8811e72609d33022003f231dc8bed572c2b85322a8cc8e87fb86ab8937bf25d394559362502e530860076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001828be101e000000403004730450221008473bfcc8d46262e6b090f8874ba501dd5516cc9202923345a07dff2e8c0bc1e02206f9f5371acf0b68d624973018e7469e771f54cd7a183f007d0dd0cb80be8cdac007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001828be101a1000004030046304402203985d69f738fcda44d01fb8ad1c3e29d41ff88689fbbe29c712e6b00cf6947e802207581ed1a23d08c0d880458143c94b38fb944af99d141bb95fae35a21f7cf2212007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001828be102bd00000403004630440220196158970be046b01d448ad92648180243a5ebb5f7679daad29eea21df4490440220653be5838a4fc4b2d4c0f76cb5ab70275f08817c9e13064251139edafde7e54e007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001828be101ba0000040300483046022100f1c3dff68ed290520cca8f24c6f740796fbccf0e02ff757ada4cd3fa55342267022100879bed48d2205c55a9d6745c9ddeb0fd1ac2db69b50d8dbf3f271a18a3b761b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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