fintest-dev-wwwsec.ukb.ch

- Urner Kantonalbank -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 77:d9:8f:8d:5e:5a:c6:e0:9b:c6:25:96:70:af:40:79:ca:e4:1c:0c was issued on by SwissSign AG.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Urner Kantonalbank

Organization: Urner Kantonalbank
State / Province: Uri
Locality: Altdorf
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 77:d9:8f:8d:5e:5a:c6:e0:9b:c6:25:96:70:af:40:79:ca:e4:1c:0c
Serial Number (int): 684221668598238798206521061979337499267819641868
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 60:ea:81:ef:e3:83:65:d6:80:a5:19:77:08:e0:93:af:47:39:7c:f4
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): ad:52:d2:b6:3d:51:e3:26:97:2f:3c:7e:e4:7f:f5:e9:38:9a:44:be
Fingerprint (sha256): 0f:7e:5a:66:70:58:79:61:a0:bd:0a:f6:7a:3a:34:fb:8b:41:ef:62:15:e5:dd:a7:cb:d5:95:36:7f:87:b6:6d

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate fintest-dev-wwwsec.ukb.ch

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fintest-dev-wwwsec.ukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fintest-dev-wwwsec.ukb.ch
fintest-dev-activation.ukb.ch
fintest-dev-mobilebanking.ukb.ch
dev-cronto.ukb.ch
fintest-dev-wwwsec.urkb.ch
fintest-dev-activation.urkb.ch
fintest-dev-mobilebanking.urkb.ch
dev-cronto.urkb.ch

Other certificates including the domain name ukb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch

Certificate

The complete raw certificate details for fintest-dev-wwwsec.ukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 684221668598238798206521061979337499267819641868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 10:10:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 10:10:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Altdorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urner Kantonalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fintest-dev-wwwsec.ukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787960913742570065153450031745058380005016611881111915083851587210716600717347367650948119128350567705619301481976834449119837424639775374836861947598728653841785601543621952382393953048258915528272482582232034429969749982148448001102671343337291783762543471961368344026524419277183069387339117845227388343944048544838564269985940769516285725164479688508723625749670589271792134046254835239080644256732442137136124904015638131846881742838275665970956371214105625962537957638620446664668048724562431932813819944411097816123617036036234028602516825221527693406316542528569577324498127560804520875156477579904128899035797559320969805650110288407718963067546098106277430691486183978228068995801886820469033233052960349974759176266380587918022098891309927191827697532674841840299582835106737389791931188042070507382428094793847117096712472769051669901143251004843130891078622759363466041283134173010150915922311515085083541900893446063589078409678100441878819931920750850846952960110812064685574005719022829345094861198639587256756821464303003350891507255631240332741295279311852899850844873891818652009601202316049275829946910117529578760711244965073302538797950444655028631033586001490502399188468331175157539504920489460894006973142947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fintest-dev-wwwsec.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fintest-dev-activation.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fintest-dev-mobilebanking.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cronto.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fintest-dev-wwwsec.urkb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fintest-dev-activation.urkb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fintest-dev-mobilebanking.urkb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cronto.urkb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60ea81efe38365d680a5197708e093af47397cf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00755365aa0cfaea7c531ee686358449d030af1a815cbc03091c52e869fc92afa967ca59b676adefe04e2afb21f8522284244be4972b5287f439b3aa644da3c38beec71e32271551f4b023b703cc094ef4b6e7fde6b95c218f69cd66f23ebb331ddc594441ecc8b5f7b6f2f94c6084d9b37bcbdba15d37ba6a88d7e5738f7456d29f948bb1e8a636b0140d93ec62f06a906a6f5cf7f6d1db78fc1453d9a49a0d5e5643e82e342d7e0feab3c08f97bc42a3d457f7280d85611b7918841fc9c60345e803969f9963db3861bce3aaa04383fe1e66c1c9017e0704c1a8a295c4befa4333c0ca3ef87fa4ab4092fbf58e5e61d2777d546718dfa380b19a7ebd604f73e6