www.unicreditgroup.eu

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 0b:cd:98:4d:88:dd:ec:8e:be:c5:b7:89:1d:90:32:3a was issued on by Actalis S.p.A..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:cd:98:4d:88:dd:ec:8e:be:c5:b7:89:1d:90:32:3a
Serial Number (int): 15689017878820233971561037430013309498
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:ac:61:46:a2:98:7f:16:1e:92:11:cd:b6:22:3c:84:06:2d:0a:cd
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): b4:bc:16:56:a1:93:bc:b3:8d:52:4d:d4:2d:ce:f8:96:bf:33:f5:67
Fingerprint (sha256): 0f:8d:23:3b:66:fe:60:5d:8c:ef:93:25:ec:45:5f:04:6b:5b:aa:30:b4:e4:55:c9:75:20:8f:35:7b:75:2a:f9

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate www.unicreditgroup.eu

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.unicreditgroup.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unicreditgroup.eu
www.unicredit.eu
www.unicreditgroup.eu
one.unicreditgroup.eu
unicredit.eu

Other certificates including the domain name unicreditgroup.eu

(limited to 100 certificates)
cpe-ro0.unicreditgroup.eu
vswunicastpool.unicreditgroup.eu
mobsk.mbc.sit.unicreditgroup.eu
webconference.unicreditgroup.eu
mail.at.unicreditgroup.eu
uctrader.unicreditgroup.eu
www.gss.unicreditgroup.eu
edp.unicreditgroup.eu
api.digital-portal.hv.unicreditgroup.eu
capgwmil.unicreditgroup.eu
www.qc.research.unicredit.eu
mx1.rs.unicreditgroup.eu
esa.unicreditgroup.eu
credilogic.qc.unicreditgroup.eu
cpe.unicreditgroup.eu
v-accounting-qa.unicreditgroup.eu
intranetportal.unicreditgroup.eu
sapuetssl.internal.unicreditgroup.eu
mobapp.hot.unicreditgroup.eu
ce.services.unicreditgroup.eu
ebanking.it-v.unicreditgroup.de
www.assetmanagermobile.unicreditgroup.eu
devworkplace.external.unicreditgroup.eu
cpe-de0.qc.unicreditgroup.eu
streaming.uctrader.unicreditgroup.eu
cpe-de0.unicreditgroup.eu
cpe-si0.unicreditgroup.eu
mobgui.mbc.intranet.unicreditgroup.eu
cpe-de0.qc.unicreditgroup.eu
gys-apiadmin.unicreditgroup.eu
cpe-hu0.qc.unicreditgroup.eu
webinars.webtvucg.eu
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
qgb.uat.unicreditgroup.eu
cpe-ro0.qc.unicreditgroup.eu
cpe-hu0.qc.unicreditgroup.eu
mx01.ba.unicreditgroup.eu
esa.unicreditgroup.eu
cpe-gb0.qc.unicreditgroup.eu
usvawqwesc1.sd01.unicreditgroup.eu
media.investimenti.unicredit.it
www.research.unicreditgroup.eu
corporateportal.unicreditgroup.eu
cpe-gb0.qc.unicreditgroup.eu
services.unicreditgroup.eu
mx02.bg.unicreditgroup.eu
scrivaniafinanziamenti.unicreditgroup.eu
capgwmil.unicreditgroup.eu
qtk.it.appl.unicreditgroup.eu
www.unicreditgroup.eu
sts.unicreditgroup.eu
api.financial-institute-de.unicreditgroup.eu
bafntplpe.internal.unicreditgroup.eu
sipedge.unicreditgroup.eu
cpe-ro0.unicreditgroup.eu
gms.unicreditgroup.eu
efsg3.ifp.unicreditgroup.eu
devworkplace.external.unicreditgroup.eu
*.gw.unicreditgroup.eu
usvawqwesc1.sd01.unicreditgroup.eu
www.unicreditgroup.eu
*.gw.unicreditgroup.eu
www.research.unicreditgroup.eu
mx2.ba.unicreditgroup.eu
gms.unicreditgroup.eu
esa.unicreditgroup.eu
mobapp.sit.unicreditgroup.eu
*.gw.unicreditgroup.eu
mobgui-cloud.mbc.intranet.unicreditgroup.eu
ucs.api.unicreditgroup.eu
recruiting.qc.unicreditgroup.eu
cpe-gb1.unicreditgroup.eu
ugs-qa.api.unicreditgroup.eu
www.qc.research.unicreditgroup.eu
mx1.rs.unicreditgroup.eu
v-accounting-qa.unicreditgroup.eu
mobhl.mbc.sit.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.unicreditgroup.eu
mobea.mbc.unicreditgroup.eu
mobsi.mbc.sit.unicreditgroup.eu
sign.test.intranet.unicreditgroup.eu
devworkplace.external.unicreditgroup.eu
UCTrader Lon Prod
ebanking.it.unicreditgroup.de
mobcz.mbc.sit.unicreditgroup.eu
cpe-at0.qc.unicreditgroup.eu
mx06.at.unicreditgroup.eu
*.tagetikcpm-internet.unicreditgroup.eu
streaming2.uctrader.unicreditgroup.eu
ebanking.it.unicreditgroup.de
cpe-xx0.qc.unicreditgroup.eu
cpe-de0.qc.unicreditgroup.eu
v-accounting-dev.unicreditgroup.eu
www.maksy.unicreditgroup.eu
mx02.ba.unicreditgroup.eu
intranetportal-images.unicreditgroup.eu
corporateportal.unicreditgroup.eu
directmail.unicreditgroup.eu

Certificate

The complete raw certificate details for www.unicreditgroup.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocmOuOtMWH/BItOKVarJ
fkXPYn4yKVGddp86gf9LoSFP5d/ekm1U2SjBYwJXP01VqMC4in6OwQdUE7w5OLv9
Rq2EFIwBAowZBqtXU+SlNxu6bmTuED/8A1bcp7VkHrEc7Qx3WqkD/cjagRP2ZwoH
RXNDo+yFCLdS4WI4QPDuDQFsSOstGm88lOlys5nYtFFtXXZSnJ5UBCnvzlmm3n8T
mX8lR3Tr4ns3kFSjZqVoKFsYxnhOwEXiNlAE2IUKDw3EL6DkVfhRf5MzMIRNi9IH
14ecbCGf5OxHOreBrSk9jQ8gVCVv0VkW1XPsNGC8z+6kjLIoK0TiZWy/uqHwCEcj
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15689017878820233971561037430013309498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 12:42:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-06 12:42:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.unicreditgroup.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20423758811673226632430561527030894340212771182196174372691083155571847271514354810622543388121689804795440958464940579151798476530047152931985560044755418733099975585540665686755910429557207562144125504598753026645857510990875613031779447318439305927193366844266887092984352497390804295441478026112113163256354580492547387204341261313740529635895888279555703509487657319686130832792291122319577511405334672565666363914898241588168101274080127088733800136741075988058290918075270195625768928096236655614070953675188782082269721981131375303817164719376839276695055928398501090005805532746616665298658718945135559123949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicreditgroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicredit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicreditgroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.unicreditgroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicredit.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bac6146a2987f161e9211cdb6223c84062d0acd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017a7be020560000040300483046022100bea35220dd1455877073ff4cbb743895afd66f182796c84166fc84f1ef4d3c02022100fc3e9276501890c666e1402e17a6e5c89a60e1fcfdcec01e250cb8ad526a05ec00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017a7be01fcf0000040300463044022006babb5c6a1adaa99827deb3caeaa35e71af88b614a3b5eb4aa28b892ae2505902206f33c3dde2f775227582399923bebd28c0672751013a3207ff974890dab2a46800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017a7be01fa7000004030047304502210097b8b91b190334fbd20032ae69f9606189906bb179bc882936c11103aa961bbe02202cde286026633878ed0c04b8096ed311887d07f691ebcf1bfd3bbb23483edac5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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