acc-api.leven.achmea.nl

- Achmea Interne Diensten N.V. -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 25:3e:7a:b0:ed:a6:d1:d0:60:b1:53:5a:bc:a4:e7:30:4e:05:e5:71 was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Achmea Interne Diensten N.V.

Organization: Achmea Interne Diensten N.V.
State / Province: Utrecht
Locality: Zeist
Country: NL

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 25:3e:7a:b0:ed:a6:d1:d0:60:b1:53:5a:bc:a4:e7:30:4e:05:e5:71
Serial Number (int): 212625992627264425679193739554878060229634155889
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: b1:2c:4c:e8:84:68:4e:2c:c7:3d:72:ea:6d:2a:4c:e9:dd:9b:bb:71
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 7c:3b:da:db:49:a6:30:48:33:6c:68:c5:56:6f:83:21:b3:ee:2a:48
Fingerprint (sha256): 06:b4:f2:cd:f0:22:fb:9f:3e:cb:44:d8:e6:b4:6a:93:ed:0f:32:b1:cc:69:50:fa:95:5f:61:12:4c:5b:50:90

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate acc-api.leven.achmea.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acc-api.leven.achmea.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acc-api.leven.achmea.nl

Other certificates including the domain name achmea.nl

(limited to 100 certificates)
detijdvooruit.achmea.nl
pre-inloggen-digid.achmea.nl
FTP.ACCP.achmea.nl
detijdvooruit.achmea.nl
bcn-poc.achmea.nl
mo-fed.achmea.nl
anderskijken.achmea.nl
pre-inloggen.achmea.nl
verkeersschade.achmea.nl
evenement.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
inloggen-abzdp.achmea.nl
testvision.achmea.nl
mobilerelay.achmea.nl
hybridsmtp.achmea.nl
nieuws.achmea.nl
test.webservices.achmea.nl
pensioenservice.achmea.nl
achmea.brandportal.achmea.nl
*.it.achmea.nl
news.achmea.nl
ucofw01.achmea.nl
zorgkeuze.achmea.nl
mda.achmea.nl
reputatiemanager.achmea.nl
iontw.achmea.nl
pensioenportaalentrance.achmea.nl
tst.tis.6.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl
acc.cm.schadeportaal.achmea.nl
api.leven.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
1.mig.cm.achmea.nl
e.achmea.nl
asd301.achmea.nl
onderweg2.achmea.nl
www.huisstijlwijzer.defriesland.communicatieshop.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
acc-api.leven.achmea.nl
go.springest.achmea.nl
acc-mob.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
reputatiemanager.achmea.nl
p-alerting-achmeadpm.achmea.nl
investmentupdates.realestate-mortgages.achmea.nl
prd-sitecorexc.achmea.nl
inloggen-cert.achmea.nl
prd-wwwmijnlevenaveroachmea.nl-sitecorexc.achmea.nl
acc-averoachmeaonline.intranet.achmea.nl
ucaccess02.achmea.nl
tst-b2b-client-api.achmea.nl
acc-b2b-api.achmea.nl
nieuws.achmea.nl
acc.cm.gezondheidsverklaring.achmea.nl
f.onderzoek.achmea.nl
acc-b2b-api.achmea.nl
Achmea Interne Diensten N.V.
link.achmea.nl
zorgzoeker.achmea.nl
tst-b2b-api.achmea.nl
DP-LOONH-KEBV.achmea.nl
www.verzekeringservice.achmea.nl
verkeersschade.achmea.nl
woontest.achmea.nl
tis.7.achmea.nl
acc-secure-azure.zzcms.achmea.nl
onderweg2.achmea.nl
www.pensioenonline.achmea.nl
filerelay.test.achmea.nl
seni-sfs.achmea.nl
asd301.achmea.nl
acc-api.schadeinkomen.achmea.nl
ucaccess01.achmea.nl
tis.5.achmea.nl
api.schadeinkomen.achmea.nl
schadeportaal.achmea.nl
zorg-sfs.achmea.nl
prd-sitecorexc.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
schadeportaal.achmea.nl
acc-www.pensioenonline.achmea.nl
news.achmea.nl
www.verzekeringservice.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
mob.achmea.nl
prd-sitecorexc.achmea.nl
prd-idin-bridge-signing-cert.achmea.nl
www.pensioenonline.achmea.nl
sapjamwidget.achmea.nl
acc.averoachmeaonline.intranet.achmea.nl
www.achmea.nl
smtprelay-nl2.achmea.nl
f.onderzoek.achmea.nl
schadeportaal.achmea.nl
acc-b2b-api.achmea.nl
attenties.achmea.nl
veilingenvankunst.achmea.nl
pensioenservice.achmea.nl
tis.ing.1.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl

Certificate

The complete raw certificate details for acc-api.leven.achmea.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsPMFgpGZaUVPPNYmQdXd
5UEEyx18b+hRvGBjvLJiLK0jqAQEwKEPYuqlxVZET8msD4/bMxGQL0A8uLVt0XbI
5XqjIzMbwkAR77TuAP/Ax+x8WwRPYVGg7fA9HX/v7eyJjhe6ca7+LdXFPmajml+f
zBMwMiO+zbKBPUapzp3Q6mHoaE0LaOq3Alrr22pwUbWg+uNq9jMtPOAwikFiaLRP
H4+06hFnkgZh/HEWJBKvXAUzNEDD73cdx4spcxvHZOSAAnYcn9M1+S+ZqpRnPobk
1mfOWqOsGocE50x0LXMH/NWd4+evTl/idun+kPEuiIzlzyP9c09XJ51JmQy3OKva
OMDPm8Okr41abU0DocprtxCeTScnNq46PUfgtZwv74GywfOP88tBVnI7nZK8IRat
tbswoINHgdMvgJX7TuWIG7RgLv/Ok3Vd04qxgtrSZF6ny76bCpu4PbIpFuhKIO34
GtEt8AkRmIYtbPvSShQfcZpSnCXPN/05Lh5T78zVcQ9Gal7GNuT9KTyyDVwL1Feb
4+iPZizEJaYoQm+cGmS1WJos6Xo2tEe/XNskTi9AVMfqoVML73nYvJb0sxdfmPAB
7qonqyamQt+kMLcJVDvBT90MAhXAk2lfYpFAXv7wvcXn9kPZCAXX37q/wzjCQhpJ
vC3KL6fZmRW7NESpev3jxekCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 212625992627264425679193739554878060229634155889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 14:30:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 14:25:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zeist'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Achmea Interne Diensten N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'acc-api.leven.achmea.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721890173616220172799033960273669130645776115340231108634499035487018654490710559354517261761299707385267486731483087581689059355319918027905318775415435055882130725481528932528009230663219543644609585447396955799603583505419629021485850278864664304793198355735963859318403850274808733261276195680201974649867643702454223928372301918261527912377325701246287788555485048823725097220708578466339465028947137710530876396488108458004437081724814686032736815948750784751094110450830561453338898151966628881289389768913882345465502982330892911396258046125766678835170026887755418466482732508715762529024995159066902331160464142684723083420727284808286557746570338418060558901678925304394297282476851095578268014366812944094491441701951411845472950831628841792591897941980541582667290941945222570437830781050606603874443797757786019752402419686656292577340263040048430830031803786581217562897319649566685554445594134646804692283938757890793617552855459175701527939637635033693244516555466510843481467729093004330136939040253048428810586549396758735490168667904839342591370811535837247565503017695559053733151515725615062519576487932460712907381783532671454502988480253077708568966605538257766313378641744132123010152093090988039028074595817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-api.leven.achmea.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b12c4ce884684e2cc73d72ea6d2a4ce9dd9bbb71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004cd645b18e3ead8a8b958113123a0893a74825df0ab611305b8bc24832560f89d958dc4378e0b3b7e574f1eb6bcb5c28b3430a2194737f2f4fa9d79393ccfb9a30e951cd575c044a7e09e76c3a36167a82c5f64a3059f232e0f3a1fbea3d24662276c636b960352f6fda249c414b3e9c63d4c6e3bd5b421bc3b1bf10b11c96fb998a00226ed777e151404d4015cc86c5b6139db4fa6a3371b8b4e4f77d4efbadb2758d094a9f10a4aa77fe52731f6eface1b95e127517ca3dc132b3beefef9d19452a2872ecd3d57df0c3b89da445b953161d130b8a9724497a47022068603f3c0846ac991c43ad55c30b1584b63cfee58b65351edf8d093a21f3f76008b18cc