vcse01.video.postnord.com

- PostNord Group AB -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:9f:95:58:ad:82:62:32:ed:fe:c9:30:32:16:a6:f6 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostNord Group AB

Organization: PostNord Group AB
Organization unit: PostNord DK
Locality: Solna
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:9f:95:58:ad:82:62:32:ed:fe:c9:30:32:16:a6:f6
Serial Number (int): 18108568250518720081885206305016555254
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7c:9d:2a:7e:8d:ac:0a:df:37:7f:83:11:79:c0:5a:c8:88:92:6c:e8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 38:0a:11:06:9b:13:6a:e5:28:1c:ec:ce:44:04:94:46:0d:19:a0:15
Fingerprint (sha256): 08:35:86:79:e3:26:08:5c:71:b8:b5:d2:7e:64:d4:02:c2:39:f2:f4:89:20:b1:16:53:27:b0:c4:0c:09:0f:6e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate vcse01.video.postnord.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vcse01.video.postnord.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vcse01.video.postnord.com
join.video.postnord.com
video.postnord.com

Other certificates including the domain name postnord.com

(limited to 100 certificates)
prod.7.slot.cdn.salesforce-communities.com
postnord.com
postnordCMG.postnord.com
3connect.postnord.com
mt-edge-b.3scale.net
alsoaskedstatus.com
atchange.postnord.com
pp-gate.ess.postnord.com
4ff0e958.status.cleafy.cloud
apps4.postnord.com
prod.7.slot.cdn.salesforce-communities.com
change.postnord.com
atdeveloper.postnord.com
4ff0e958.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
vcse01.video.postnord.com
postcards.postnord.com
4ff0e958.status.cleafy.cloud
mt-edge-b.3scale.net
dp-dev.postnord.com
prod.7.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
PNISEADMSKO01.ess.postnord.com
apps4.postnord.com
prod.7.slot.cdn.salesforce-communities.com
mt-edge-b.3scale.net
lockedspace.postnord.com
api.postnord.com
gate_pp.postnord.com
prod.7.slot.cdn.salesforce-communities.com
toldkamera.aws.postnord.com
webmail.ess.postnord.com
4ff0e958.status.cleafy.cloud
alsoaskedstatus.com
api.service.iot.postnord.com
atchange.postnord.com
prod.7.slot.cdn.salesforce-communities.com
edit.postnord.com
atdeveloper.postnord.com
outlook.tpl.postnord.com
gate.ess.postnord.com
prod.7.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
www.epiphero.com
autodiscover.ess.postnord.com
webmail.ess.postnord.com
smspasscode.ess.postnord.com
atapi2.postnord.com
ost.aws.postnord.com
4ff0e958.status.cleafy.cloud
api.ofm-test.postnord.com
developer.postnord.com
4ff0e958.status.cleafy.cloud
iseadmin.ess.postnord.com
smsreset.postnord.com
autodiscover.ess.postnord.com
atdeveloper.postnord.com
pbm.npd-dev.postnord.com
4ff0e958.status.cleafy.cloud
prod.7.slot.cdn.salesforce-communities.com
pura.postnord.com
vcse01.video.postnord.com
4ff0e958.status.cleafy.cloud
atdeveloper.postnord.com
atdeveloper.postnord.com
*.dev.retail.aws.postnord.com
mt-edge-b.3scale.net
*.pgm.postnord.com
pura.postnord.com
alsoaskedstatus.com
t-gate.ess.postnord.com
pura.postnord.com
prod.7.slot.cdn.salesforce-communities.com
4ff0e958.status.cleafy.cloud
prod.7.slot.cdn.salesforce-communities.com
4ff0e958.status.cleafy.cloud
mt-edge-b.3scale.net
4ff0e958.status.cleafy.cloud
mt-edge-b.3scale.net
4ff0e958.status.cleafy.cloud
iotlab.postnord.com
pp-sso.ess.postnord.com
mt-edge-b.3scale.net
emcsproxy.tpl.postnord.com
sso.ess.postnord.com
www.postnord.com
mt-edge-b.3scale.net
api.postnord.com
business.shopsavee.com
tracking.postnord.com
publicgw.postnord.com
test.account.postnord.com
alsoaskedstatus.com
4ff0e958.status.cleafy.cloud
atapi.postnord.com
prod.7.slot.cdn.salesforce-communities.com
lolanano.store
alsoaskedstatus.com
alsoaskedstatus.com

Certificate

The complete raw certificate details for vcse01.video.postnord.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnL5J0lA5yJR/dLGZh6rf
JMV2hKcqImlm02yWvrTpy8FoCverHIBHcSAPNEhQqcAot/JnDoZj7B9BqnLryN1M
cHchtnUQpQ/maezcJ0d0ikmHiIoek5ACPJKxvNYaDVvwEkBwiLn+NAdQ0px6B2Wj
/V4XMRTIIoTgL/wFcnjEXEq9UjFgM8rJttJK61U0knSpNyGfI6R3z6iHxnsOSMA5
0j+LeV/M5WB1j9pchFVxxS7hgzIRad+XjMuwx098FbCeHZGEZb6dupkTqb6a2yDK
+LaY6VUqjqwA3qrYtZ70eCykgXZ2ddLgAIrcuZtm2J2ONYgvSt00+hpK8PvmHfDi
UzUzCfZh9UN9e12LfyhOo2uSHZlhtb2vktFVKFz5VQhRIX0bpcQ7QxyPIDjhiJde
OFtmAVKOpJxJS4QBXKvOri54Q1UJ3wAv9JuVd2+io2cozHRQAFFJ+hcJbepMv4TB
VM/lZx+yPnPJ4c9DhDE3Lx+Kd92grJF6uoz/75WIj1p6+4fAh6XZQDjMrocvBVe+
MzUMjxCD2rVTiQZr/Pffa+A/eis+d3ejwj7DjP9yIv4law4k+Fg5i6ySTi574f8Z
yZm1JNeSDnclucrsm1LMOEViFFMIZh3RcnGRA0ZUnDOovZ5xyC9ss4D0IhACVsFp
Vp7FFiMW5lmILS9KZZ59438CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18108568250518720081885206305016555254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Solna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostNord Group AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostNord DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcse01.video.postnord.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639456930865146373510821483924591407822470813409559719446659940821374371889665547660044811759340890546404478717640314383297591507122189480302947292994279161433610618669938327102856458573305238385241813940311086494338595691148270071550656587700389088805165551046691762578979293219990618543888976456355040287061700802858973082565103923405693678797253864843300951910450568923384554122987230891074543610369405502151099723924274741647889938983138139294235615885153867214375772013856200408916833570347347316027435322410477666460612565454456562253315687722011661914322387393397799046355555818423219737883298506183915377010114576547421111728539050016540854098521523285236175964358777875870017211896144475782296061158756146336429894066981813688800465933131276991912888245460511745872865903507717862559407640769565624528611507609956558553824471644741961176188638085511626929459181590613031867747401340367233126088361711633704361414874712627908228512128317885897930140078123944275251666972428955371249030424829036545852367744459070517332225002738475437342330372808290771014344449645911615126183251668592494146648747098383969575599148532482351753285869663762598453327675826120965238788460420146707372290871191262809205867737169814841091912754047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c9d2a7e8dac0adf377f831179c05ac888926ce8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcse01.video.postnord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.video.postnord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.postnord.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162af224644000004030047304502210088b8cf31f811af695a0f01fbafbb561368907e61ff582042fcdbb0d10102a35a0220677442637c27dbef32edd1742b7a0fa83f55443917bf2e2b6ba85092f8ffe6070075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162af2247af000004030046304402207f468ea2955af278d0a4efec15e203b26602e2a3fa8e73aa62b7223d5c2424b402204313faabb81391a3d5226f21473726154314a2bf098468f7fda08ad226dbfe7a007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162af2246550000040300483046022100befd79d05c15742daf9fda742f59960edcbd72bd3fd38901f295c5073f1f5412022100888c87974b5d9fcd86b2f49bae161502edd172113f2841b435d58830e005adc7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00624bf29da5af97d670ea80a735b8e63d16b713b4c3a34d3edb5ed0782273795da8f9fa403b09fcc69e743adf1ab75d3870fee70e257dbfc2841d5f3855a07a3c9b1dca685992e9b0ae69453bf9face3ce4ab1898996a806ddae0097de5591770591f02115763e989a2c773b363c47aeef0ee21456f9c28030eddb53447c12322397f776dd35505bab2b7eee21903b1526fb0309d614b400dc73576fbbb61d5d789477ea78ca1ecd73cc619536226f1be191f5bbeade32141b2a02735baeb2cadfc7762cf03c8ea7c4de2c66a1b1b77b05812fda3e85e436e75e77e6746c97f1bcee9ff495d883f442c5117ef63c5dd56e24a8ba1bb2c1f1b383c96fa63f67cc8