b2bacc-connect-portal.kpn.com

- Koninklijke KPN N.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 26:d7:58:4e:39:09:6c:75 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Koninklijke KPN N.V.

Company registration number: 00000003020452000000
Organization: Koninklijke KPN N.V.
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 26:d7:58:4e:39:09:6c:75
Serial Number (int): 2798802786421664885
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: b0:46:48:2d:58:ab:66:71:74:4a:a5:5f:93:1f:0e:8e:6e:b0:ac:65
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): 8b:e3:ac:d7:86:cf:d3:0f:97:61:90:f4:ef:b0:2c:dd:83:b9:28:5d
Fingerprint (sha256): 07:51:47:eb:09:66:bd:18:15:f6:59:dc:71:41:74:e2:39:9d:a7:8b:e7:d7:7c:c4:e6:30:8a:19:7d:e0:90:df

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate b2bacc-connect-portal.kpn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b2bacc-connect-portal.kpn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b2bacc-connect-portal.kpn.com

Other certificates including the domain name kpn.com

(limited to 100 certificates)
sentrymail.acc.kpnnet.org
api-stg.kpn.com
shop.kpn.com
aditum.kpn.com
status.digital.kpn.com
lotte.kpn.com
*.mcmws.pmr.kpn.com
admin.dsh-dev.dsh.np.aws.kpn.com
api.cloudcontrol.kpn.com
lotteschedulee2e2-tst-new.kpn.com
*.mcmws.pmr.kpn.com
zakelijk.kpn.com
transfer-datalab.kpn.com
cordys-zm-value.kpn.com
prexdsl-c-serviceweb.kpn.com
portal.sap-hosting.kpn.com
mcpms.pmrtest.kpn.com
mosaic.generictaskservice.tst.kpn.com
*.3xoc.infrastructure-testing.np.aws.kpn.com
rt2-vlg-1.pmr.kpn.net
0122016378.StichtingKentalis.client.mvr.kpn.com
cloudkleinzakelijk.kpn.com
secure04.lithium.com
ws.kpn.com
files.cloudcontrol.kpn.com
service.kpn.com
design.kpn.com
nieuwbouwportaal.kpn.com
aditum.kpn.com
zakelijke-community.kpn.com
*.cqbmrv.infrastructure-testing.np.aws.kpn.com
b2bacc-connect-int.kpn.com
saml.eid.kpn.com
*.hwm44g.infrastructure-testing.np.aws.kpn.com
aas.tv.kpn.com
wsipuat4.kpn.com
cordys-zm-value-acc.kpn.com
account.online.kpn.com
kpnassistent.kpn.com
*.hibwy1.infrastructure-testing.np.aws.kpn.com
frea-test.kpn.com
businesspartner-ppd-s.kpn.com
*.mcmws.pmrtest.kpn.com
store.online-demo.kpn.com
inloggen.acc.kpn.com
zakelijk.kpn.com
x.acc.kpn.com
monteurstool.kpn.com
lottedev2-tst.kpn.com
login.kpn.com
*.rzr3o1.infrastructure-testing.np.aws.kpn.com
zeus-prd.kpn.com
eventgateway.acc.kpn.com
*.c6tnfz.infrastructure-testing.np.aws.kpn.com
*.nl9s.infrastructure-testing.np.aws.kpn.com
LotteSimulation.kpn.com
atvorder.kpn.com
lotte.kpn.com
uwv.portal.soc.kpn.com
serviscopeapi.kpn.com
secure08.lithium.com
vm4.kpn.com
prexdsl.kpn.com
if.auraportal.kpn.com
w5031.kpn.com
mobielbeheer.kpn.com
*.vre7br.infrastructure-testing.np.aws.kpn.com
secure08.lithium.com
*.jhlv.infrastructure-testing.np.aws.kpn.com
marketing.kpn.com
b2bpoc-connect-portal.kpn.com
b2b-portal.sympac.kpn.com
*.fiw8vk.infrastructure-testing.np.aws.kpn.com
sip.kpn.com
bpapi.kpn.com
www.kpn.com
cloudkleinzakelijk.kpn.com
mcpms.pmr.kpn.com
login.wifi.kpn.com
mosaic.generictaskservice.acc.kpn.com
b2bacc-connect-portal.kpn.com
test.kpn.com
pah1.mvr.kpn.com
ws.api.kpn.com
*.mcmws.pmrtest.kpn.com
b2bpoc-connect.kpn.com
*.prd.cdn.bcms.kpn.com
b2bacc-connect-int.kpn.com
lottee2e2-tst-new.kpn.com
LotteScheduleE2E2.tst.kpn.com
sni.kpn.com
eherkenning.kpn.com
*.prd.cdn.bcms.kpn.com
remotesupport.kpn.com
b2b-portal.sympac.kpn.com
vpnportal-internal.kpn.com
wsipprod.kpn.com
*.nghf0k.infrastructure-testing.np.aws.kpn.com
ddci.kpn.com
vcds.stb.acc.tv.kpn.com

Certificate

The complete raw certificate details for b2bacc-connect-portal.kpn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2798802786421664885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 08:20:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-16 08:20:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003020452000000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'b2bacc-connect-portal.kpn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856905358851815360967138170308915525046272609860960683048800214656708352977138842828003541924726575975496956319881168760705008554669357145805049263885319331803796263553868638136369753997700771641487845989654727032975166957703561713028712528855578572731199955386256566212859453461847496459356339375108805354346882934294423072190398913111012518805361399986773747538211953377180045257675161156356815422024677783922595834096591415616638809275197345021055579650526036536911591709757117705998560583983695680421094139462618998010780329006848496475564272473233650231968283590211985943223933721530533909606175852756703742090274523032676176773456724273516350748555331293574125013715564895653521766660937571810758143549184579759644663223833911831720660237179695084519644397354457864171496701576921180567447787443274548787979932197746471619498960994204055107211058999892734203960244168163468530092934989852724118204917149564973180555824320588173225693037365476534561118512586165575420701397632601340785852951388931368347441509921300138919517803060938759341938436182883300657296783591198679738976610215958953866471540123535850038199008562412885744973863190649803478607134093597581297386824565460947798322869063363284231767800093730967516278407447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b046482d58ab6671744aa55f931f0e8e6eb0ac65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bacc-connect-portal.kpn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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