webkim.de

- akf bank GmbH & Co KG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 63:78:e0:1d:11:59:50:59:27:0a:ec:15:17:0e:c1:0b:e1:1a:c6:f3 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

akf bank GmbH & Co KG

Company registration number: HRA 15563
Organization: akf bank GmbH & Co KG
Address: Am Diek 50
Postal code: 42277
State / Province: Nordrhein-Westfalen
Locality: Wuppertal
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 63:78:e0:1d:11:59:50:59:27:0a:ec:15:17:0e:c1:0b:e1:1a:c6:f3
Serial Number (int): 567885698778681762683440859196295620354958345971
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 4d:cb:c8:41:9a:eb:4c:62:b0:40:77:e1:47:70:a8:eb:eb:f8:76:2a
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): cf:7b:e3:a1:2f:02:0f:72:4b:46:bb:b3:2c:cc:74:24:55:03:c5:49
Fingerprint (sha256): 09:fb:aa:3b:de:4e:3b:a8:dd:51:57:a1:ad:f6:22:95:db:f8:d4:13:1d:8b:30:6d:9f:fa:0d:74:e6:b5:70:fd

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate webkim.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webkim.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webkim.de
www.webkim.de

Other certificates including the domain name webkim.de

(limited to 100 certificates)
www.webkim.de
www.webkim.de
webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
webkim.de
www.webkim.de
www.webkim.de

Certificate

The complete raw certificate details for webkim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 567885698778681762683440859196295620354958345971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 12:06:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 12:06:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wuppertal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wuppertal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '42277'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Am Diek 50'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'akf bank GmbH & Co KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 15563'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webkim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764570519083696406622847246261012322471498559163469550744197593897862575370012648559736470708995082751649216295850571642118176531828793771956461352681380525479614696953459059751903790083528669027615415266969186722061087354689537450794142185007738942235958793441196858259129223124585627674708929421006485576012690723373126146994472925807981326077930105254824672906427049545941679393423619320647835157202987999513137706262184530452703207924758190377542399928860871755755299042231202610823515863006246786551653180523722557023692472711703049635280877224192197040031289665383752805162318643559002530533990664268356718649949549731869659505653437498088978081580898939533185422583192967619568585704840258493583025378389408402279760093132812582402683431479227594071319904199286038023837764039303458511758995337950159101705814581414489447291789034011171259827749182553884912390871167568595193487538879006677755317376859256130608044640214658374320104648473896970326948951050764810808213342999288008984770593164221708838124246957667942359669655863506113906176417663887417666150076938322662290735219573906504595726970688901031529628299101195924716070669214495929148113957253527629494579450501347870613125245379448386620440719647962472702594110427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webkim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dcbc8419aeb4c62b04077e14770a8ebebf8762a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018cd9842f6e00000403004730450221009b41a1c11f34081d26ae6c1e2dc31c13074d6faef89771a83976364c9a6dd08b022052f1dafac2a2acbff319e70443345450d1750f0851aef9df842a32d4e02facd3007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018cd984310800000403004730450221009be05c4c3c3cd38ba12c7d2161d2f3acf1cc0660f5a335876aad607bd7e41fa5022073915dfd4fd9831e35c4347b53816411729834f33c30bcd7be90c382b99e352b007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018cd984321d0000040300463044022036f03005ab6202a3135a83ac70400242aad3cf77d9e9549ff5598e02ebc482bb02204c6b652a263a280acc4a73fd2ffde3cadce3d1a7beafda4440c8d04c2df4a0730077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018cd9843529000004030048304602210084556be994c088d971244e179f645519ac6c5f740ce9cbab39a5104ee222d264022100e8cccdfcfc6ffe8fdfedc98ead08a91bfcc154c2e31c90526ff565c942155280
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003faded0c90fa62f39223a00258b7791006e78c2c8be99ffcd613b8c3501f2e661c045ba5e7db2290f359b119e58f3c9e1646286b27a5368266bcb1e107db62d90e559f97a94bdefc361b1275e52933f61e732b744d0585181d77b285926a49966de829f299479b900413820d23fe3616ed92386532d4cc31dbbfaed62b2fcbf201fc70455d5338baa51452925a65463cc8a56a42f58fb71710c55037b33d0cf4891e06c36edbdc791e4652a73c435643bd019a6753bed5bf36a6d969570b8185153981ab64104682d3646d8c917c3a5834201d43c19d478802c4d072cd29a33eca1677c1001b208235020f95d5590af4976bb95ae27670d459e26547e3171f583b2396206cd41f810abae843e1e97203b67088643409c48b0428dd6dfe4925851befd712a59510ee0fb22a103401faa3b9cc57ea257d9ea35386c69ee96d917025947b0cb7043a785b548b17bc352507e5b6fc0497a6ac3ef1d2b7a0f79fe5820b6d0653434a72565fbb6b5c6e3d983c7f3a56b1b4c51911a0f5beb961926d3d1ab65565d79c7c1d554a02b6a359216c0d7a39c6b49ff6a295435633d6ab4b5e5cd0acb20684f05da78be9bc5bd41e32de4e6221f21c2510269b4c3dce75ce8161d86877e59304706f017504e31232c9cb3e2a298d68f3f0b83fdaea4dbcc911a8b40be16aac1e4afc3dc8b320eb312b38a275ddb616d92ac1cc098e7e9a0ea0