www.privasphere.com

- PrivaSphere AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 58:78:50:f2:bf:b0:91:63:3e:1c:63:3e:7d:80:f1:3d:a8:4b:95:62 was issued on by QuoVadis Limited.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PrivaSphere AG

Organization: PrivaSphere AG
State / Province: Zürich
Locality: Zürich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 58:78:50:f2:bf:b0:91:63:3e:1c:63:3e:7d:80:f1:3d:a8:4b:95:62
Serial Number (int): 505074328842328228850564904478080736309673694562
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: e7:57:c6:f0:1e:d1:fd:a3:b3:c4:2e:f9:89:43:93:56:66:f8:5c:ab
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 7c:ac:95:2a:8f:19:4e:db:71:17:44:a4:c6:ea:a5:7a:99:b1:c0:4e
Fingerprint (sha256): 11:7b:de:ad:0e:4c:54:0b:11:5d:ee:09:ff:64:7f:c1:e1:fb:2d:57:b0:40:11:2e:8e:b2:92:9b:50:35:01:84

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.privasphere.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.privasphere.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.privasphere.com
secmail.tg.ch
eeg.lu.ch
ees.lu.ch
erv.tg.ch
securemail.holcim.com
securemail.ar.ch
securemail.zg.ch
securemail.bekb.ch
securemail.ifrc.org
secmail.ukb.ch
p4u.ch
www.p4u.ch
zh.p4u.ch
glb.p4u.ch
securemail.lu.ch
www.zh.privasphere.com
www.glb.privasphere.com
vrfy5210.privasphere.com
large.privasphere.com
erv.sh.ch
jusphere.privasphere.com
securemail.bav.admin.ch
secmail.bvger.ch
securemail.blw.admin.ch
secmail.ti.ch
sec-data-exchange.oak-bv.admin.ch

Other certificates including the domain name privasphere.com

(limited to 100 certificates)
git.privasphere.com
crm.privasphere.com
crm.privasphere.com
bugs.privasphere.com
www-dev.privasphere.com
www-dev.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
git.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
*.privasphere.com
bugs.privasphere.com
www.privasphere.com
crm.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
www.privasphere.com
git.privasphere.com
tickets.privasphere.com
www.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
crm.privasphere.com
tickets.privasphere.com
tickets.privasphere.com
www.privasphere.com
tickets.privasphere.com
*.privasphere.com
smtp.privasphere.com
bugs.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
www-dev.privasphere.com
www.privasphere.com
www.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
crm.privasphere.com
puppet.privasphere.com
www.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www-dev.privasphere.com
git.privasphere.com
bugs.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
puppet.privasphere.com
www.privasphere.com
www.privasphere.com
git.privasphere.com
git.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
*.privasphere.com
www.privasphere.com
www.privasphere.com
crm.privasphere.com
typo3.privasphere.com
crm.privasphere.com
typo3.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
crm.privasphere.com
git.privasphere.com
typo3.privasphere.com

Certificate

The complete raw certificate details for www.privasphere.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 505074328842328228850564904478080736309673694562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 15:06:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 15:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PrivaSphere AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.privasphere.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751643419784305404891678440170354160801484565893953817887270057091968179881534013643408931992224379347221914412168238543980746005584381985227731787937184561503820454470056991331519235326943726613779819569733407283189801427556661921903012871549697025246247590491269931117048298624304666168325386866513162839351916099291632880097033682609591246083768955343449692369012315333328497939883566124391337744572390972146891698175357608230927069859991951679044224100800904407652858588239057737459431243461011173277304743856796350448162967609782703810456481117935551599431966248144563573294587328895063476872122915502775770779377808037573304071523442287561713546676149096916003088570496486653959063735853084708112291278485248188071106702631764401145634102285663811252693837978797042168986853774304284871774604647704285522563436952081760928487076505066893361619926467409612584228762358427674895864101254237673281705126497043897278745437592348247553657939743012778413527279113912071704254135691102139219506503026826464876581520536934584346235264379630760308369142883229295704247014324832959778478009867810356715405367277898542594108877478149378304902770894790089802972196109708446048082996746879103122771462301682241901566790309994441405337922867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.tg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeg.lu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.lu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erv.tg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.holcim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.zg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.bekb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ifrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4u.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p4u.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.p4u.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glb.p4u.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.lu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zh.privasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glb.privasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrfy5210.privasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'large.privasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erv.sh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jusphere.privasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.bav.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.bvger.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.blw.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.ti.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec-data-exchange.oak-bv.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e757c6f01ed1fda3b3c42ef98943935666f85cab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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