The Hershey Company

- The Hershey Company -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0c:df:75:00:72:e2:fc:dc:00:22:2e:c0:f5:0e:39:ec was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

The Hershey Company

Company registration number: 224803
Organization: The Hershey Company
Address: 19 E Chocolate Ave
State / Province: Pennsylvania
Locality: Hershey
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:df:75:00:72:e2:fc:dc:00:22:2e:c0:f5:0e:39:ec
Serial Number (int): 17110991226351586730960832183472634348
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a4:dd:1e:bf:02:5f:25:0b:5d:57:02:e6:b8:65:33:4c:60:73:f7:32
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 2d:4d:3b:44:5d:09:3d:4e:0a:90:77:a9:9b:46:c4:7e:25:8d:4a:c6
Fingerprint (sha256): 0b:ad:63:59:9e:68:24:42:0c:9c:17:b4:80:fd:8b:cf:3b:43:4e:60:65:55:32:b8:c4:63:29:c2:89:28:78:91

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate The Hershey Company

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for The Hershey Company

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hersheys.com

Certificate

The complete raw certificate details for The Hershey Company in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JKuX6pazWpW95ZP7RAR
UqsikGSFS0Zo0HsyGeuok/LZndMJQ3lZ5fc8Dd6f4/3/+ARYuwcNeOTLaSXC7MKZ
OFlUDKt3g4GPSfX75hz+p06xcSlEIGqbt1OlD0aF10ZibJqDPy/s4AGk8yqpdf7y
sY7HP6C8tW53cmuaXUcRVEtoeVGQr+EszlzxdEnVQWiXLy2FjWIBBjsaQmlE6biy
JxjuO4+y5GntjcSVxfQ5eoeZLiQHeRz2jcyif79xLmD/ltaE4Qd7XphVvqRsr42p
Mx1VSMm3Epg9wWm00ha4lQw091e2EudCXMSppHYf5RV3MDtlX+FAsd3HCZu8YYq+
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17110991226351586730960832183472634348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '224803'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hershey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19 E Chocolate Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hershey Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hershey Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00004012936'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27844758262056000854239396232491416995891545410181795582599250402460718803889319140745096950627798552928723743170636152259463918040392523970099517393894887707519734546455116702933832189847660003446369093005485962626094197031229363378628778154516398254632335967362550473871548334528868387334995366323142289334988343594198956055873801485616531239654494520827487203150502779452727241769426839557319101180740398518923968832870190113039580401407508915885882126113687046405250210172032277819203846956961080850401878784701506968448663281785929439518721865659455540177487590215608786788217842807186551958454098098498640199397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4dd1ebf025f250b5d5702e6b865334c6073f732
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hersheys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															f9ba4b4a6d45cdeffb7775119f8aaa2e48426a7c
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00bf826c843b7b30473730a0abaffd88bf5a43645001a53c782a9194b915f77a9cd53940e8895cf4ec606ea72b2b1bcc3b495c60938f463d111f0382f43bf4308fe67093455fcb557a8308322494bc8585228048f05205a0254e2a1a82ea95ab1d4ff9075a48d5988dd646b498e4f5f9ea7f770dc98c811bf0d918da8c089f327e71789c174f41d23b6c0256b704a9ea017d788c2f33b619e67d39121d9aecfb5cfba98a39627ba498464ea80ee5378108e38101950c64c100fd41fe13a1c8832571ee77ed0071b23ae46dbda0a9ad541069070b29c7af2bdeedf8345ce47de492c77d49f44fbd24096e1a9ae7c1b5eec315ff030822e0f45bb783ca8d3467731e93df06a037dd679cec4cd0dfc0c79c034c3cdef4242ea67001520963d0728bc3dec6a3231d8f0ff30b67d1fc6d7d1bc773cdb02d8def05a8b249d2bdd7b0be34d311d3051d5b8009b5efb499210b97fdb10a9b3f14c80697769e6b92f714186f05448474ae65cdc953fb0a5c3cf59e2d4c025ac2ae36cc5b69e5701f9ae1a503a7fe762e151f4158ec96e49296362ca214990c5ab602bfa164af5d826a275412a19459bc6ad4aacba87fecb4f61646c4b2b7b71a39a299f696e7b95e42f2c942382a062dae08914c2e7e32ae23077af666802b0746c6c65952f131deb00fc86df8a6c8b7b6e0db90620d200939b3e6f1c2788c38449cf1bf11b3f87086e84051