api.training.cyber.mobiliar.ch

- Schweizerische Mobiliar Holding AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 5a:cf:32:15:4c:38:c4:51:53:34:18:95:f6:f6:8d:ff:98:e0:0a:c0 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Mobiliar Holding AG

Organization: Schweizerische Mobiliar Holding AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:cf:32:15:4c:38:c4:51:53:34:18:95:f6:f6:8d:ff:98:e0:0a:c0
Serial Number (int): 518429786491783767622566178741747450125792316096
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f2:f7:67:fb:b0:17:96:80:fa:3d:79:54:25:33:91:02:96:8a:e8:6a
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): dd:7b:08:df:6e:2f:0d:91:82:38:4d:a2:71:4b:f8:28:ba:5b:12:6a
Fingerprint (sha256): 09:16:14:21:3a:50:6f:ce:dc:38:89:04:23:ea:46:ab:76:44:11:e1:f7:d6:42:9d:ed:bb:b5:ca:bb:e0:67:3c

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate api.training.cyber.mobiliar.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.training.cyber.mobiliar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.training.cyber.mobiliar.ch
api.training.cyber.mobiliere.ch
api.training.cyber.mobiliare.ch

Other certificates including the domain name mobiliar.ch

(limited to 100 certificates)
standortcheck.mobiliar.ch
vpn.mobiliar.ch
gp-devsec.mobiliar.ch
cloud.campaign.mobiliar.ch
gp-ext.mobiliar.ch
securemail.mobiliar.ch
m24pp.mobiliar.ch
client-auto-i-dat.mobiliar.ch
vorsorge.mobiliar.ch
leonteq.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
leonteq.mobiliar.ch
marke.mobiliar.ch
gp-portal.mobiliar.ch
gp-gw-prod.mobiliar.ch
video.mobiliar.ch
*.content.mobiliar.ch
meteo-alarm.mobi.ch
gp-gw-dev.mobiliar.ch
tinelstest.mobiliar.ch
sos.mobiliar.ch
test.mobiliar.ch
gp-prod.mobiliar.ch
strategiemap.mobiliar.ch
raiffeisen.mobiliar.ch
gp-gw-dev.mobiliar.ch
mobiliar.ch
trainingnet-compliance.mobiliar.ch
api.training.cyber.mobiliar.ch
staging-video.mobiliar.ch
gp-prelogon.mobiliar.ch
test500.apps.mobiliar.ch
marke.mobiliar.ch
click.campaign.mobiliar.ch
newsletter-cdn.mobiliar.ch
selfservice.mobiliar.ch
secure.mobi.ch
gp-userid.mobiliar.ch
meinauto.mobiliar.ch
handwerker.mobiliar.ch
jobs.mobiliar.ch
selfservice.mobiliar.ch
gp-userid.mobiliar.ch
luawext.mobiliar.ch
strategiemap.mobiliar.ch
url4870.mobiliar.ch
resources.mobiliar.ch
gp-gw-dev.mobiliar.ch
selfservice.mobiliar.ch
newsletter.mobiliar.ch
ucc.mobi.ch
gp-testzertifikat.mobiliar.ch
*.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
mobiliar.ch
*.mobiliar.ch
kunst.mobiliar.ch
my.mobiliar.ch
fancystuff.mobiliar.ch
msghub.mobiliar.ch
mp.mobi.ch
cyber-training.mobiliar.ch
eshop.mobiliar.ch
test.mobiliar.ch
client-comparis.mobiliar.ch
b2capi1.mobiliar.ch
tinelstest.mobiliar.ch
www.handwerker.mobiliar.ch
check.mobiliar.ch
cyber-training.mobiliar.ch
b2capi.mobiliar.ch
liip-lead-client.mobiliar.ch
pssp-admin.mobiliar.ch
test.mobiliar.ch
vorsorge-mobiliar.ch
b2capi.mobiliar.ch
tymodenengelsman.com
vorsorge.mobiliar.ch
fileshare.mobiliar.ch
msghub.mobiliar.ch
meinauto-client.mobiliar.ch
smide.mobiliar.ch
gp-userid.mobiliar.ch
elm.mobiliar.ch
kunst.mobiliar.ch
igb2b.mobiliar.ch
b2eapi1.mobiliar.ch
eshop.mobiliar.ch
b2bapi2.mobiliar.ch
sign.mobiliar.ch
vorsorge.mobiliar.ch
viq.mobiliar.ch
jobs.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
b2capi.mobiliar.ch
awareness.mobiliar.ch
z101392.mobiliar.ch
client-auto-i-dat.mobiliar.ch
kunst.mobiliar.ch
ftp.mobiliar.ch

Certificate

The complete raw certificate details for api.training.cyber.mobiliar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX/ARtfdUU3kzHHpXHf4
E9CGa7arZ3iBYksFmTXtHHK/RBhYEqXcN/Qkq6uM2a+ifx2zIPsHyXPd6YZT+0fT
k+N0LcSifTEajd69llhjvZDw5defbmVM7Gp7Nk63lCdF7uRlxbe1W4JL3JrLz0KZ
6C47qwAvYFTQESWPM63LYuH/h9UZTSlW5XbQsm2INrjJ9Jn2GhGAvH0MvBeT0hHQ
XAkhFZxUw4gzKWEAW6W1LF+3jGA5s2JTWUUfLJfOORt515oKiN9i2DAN4hiYq84q
v3Txorew2kwPqhfOVR7PMb5/d/CN4MsD03ThQZcJXtru1+9hmwazOctCwD5o1g+6
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 518429786491783767622566178741747450125792316096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 16:57:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-01 16:57:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizerische Mobiliar Holding AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.training.cyber.mobiliar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21902223165068451764592480778170959670635026599402631529540636317530147646540103142802882313294380263024240396536409614479641406995744773424601604637874157452059393756889726455920672491575091835336149373072858737149157822144260264867833916225382795513727676239165524757598434076001468898296036849843502000856433627651277686371766623894243164526256527233492586674549883775821425977692625600249787633019520071813151065169468273495785237669810632581244847262300653123189561263063135125255306385560466450154616787518272320694625230972548274859306426765962021309480458020165054863652403856897782256722185585287009141766751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.training.cyber.mobiliar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.training.cyber.mobiliere.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.training.cyber.mobiliare.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2f767fbb0179680fa3d795425339102968ae86a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (599 bytes)
							02550076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000017eb6389c6f0000040300473045022100950dfb65dd3064b642fdecee7cf21a52f5ad73d41c225ec2465d46535cec6b6802206e1e184f609d6b72f899864e889bcd10af1bbef1be90a96fb12b1692ef74721e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017eb6389a8d000004030046304402204b7032cb626bdcd3b5e4e0b68b0be5c9af18fc472967c813a4247b40c2d92022022038105d36ad27f4e19e7952090bdbd44aa8d0178c1ab682a81aa7a4602fb42cde0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017eb6389a670000040300473045022100d54e0a67d8f434e712ce6e0992d7fb557cdd9f9c2444fe1bbea41fc5bc49fdde02201f2850d0acaef90528b953861aa8b455f95b4fb93d4ad86b41a2c8f2be8da559007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017eb6389ae8000004030046304402201eb4955a6cb8303874317c0fe45c9e842c789381bbcb986635166b58ee3cfb98022049c7df19f7146e5612a5a4b2c51fff6d3adeac95fc9cd716fa8bb51f27c03acb007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017eb6389bee00000403004630440220618074d538a63b6b68a1ce4ec3ac6f213e9eb18b5ddf1409ce627d7885dd295002204a8c413f219b7972f9ae7d5cceea2b1fce95fa19b4ab7d1479cddfc6cfa63ead
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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