events-test.postfinance.ch

- PostFinance AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 42:63:dc:60:8d:ae:8b:40:a5:76:db:1d:17:1a:34:2b:1b:ca:13:95 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostFinance AG

Organization: PostFinance AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 42:63:dc:60:8d:ae:8b:40:a5:76:db:1d:17:1a:34:2b:1b:ca:13:95
Serial Number (int): 379020362207367583390558502969535900489213416341
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: aa:6b:8e:e2:77:cb:00:42:7d:f4:79:ec:c1:44:de:f6:42:95:41:24
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 74:c0:7b:a7:e2:34:50:4f:71:cb:aa:f3:13:98:37:57:41:ca:35:9b
Fingerprint (sha256): 16:63:05:8d:2f:fc:3b:40:10:5d:49:38:e6:59:ea:d1:47:eb:9c:d6:0a:fc:a0:3f:e7:72:d6:c5:74:87:9f:55

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate events-test.postfinance.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events-test.postfinance.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

events-test.postfinance.ch
www.events-test.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for events-test.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379020362207367583390558502969535900489213416341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 05:58:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 05:58:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'events-test.postfinance.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815680138716637075128429168094760198604426152851650279556498367889861949883738853615312838208958667883020460778398816398173222861870180593028992521662297349730541781703917547240972277212005801214981678544616779772049166917029613098559727119646959644176173618475242399635482402351134663107864897981010407133946602235490636517845337519322153321896219578444897452951922187857836084408586281841227547159892244159866013288911103322716274622823028895896250320587407144479854406625345929890843342269329127804001469377216847500152221744239827873824926127282591337151027883254431640475979161923685859242628382043927393420581007743640422753019880368055901741009426838783955468783268454700313772946693090805475404224936917700086883062608107495276203899378099098185474617400144291546231717069946117193494111919823434310856996269018241228741940574843723240229101490984662131604263720257996490690691411350410072442790750194065867589682909798358201012549921623509810432070366092678105802718954982039056693271329185523261086319293187472299731172659539967611124416158792685055211264198866148405917106900483566020329156371519550782068250542123575552305073637464723082030132549246568423666544761089123016181091554346402845188546543151397985317391622297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events-test.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.events-test.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa6b8ee277cb00427df479ecc144def642954124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (727 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (723 bytes)
							02d10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001825d2206860000040300473045022100a28e811d2aba0d747d36734db5fe4f881bac2ea02f69b225887e1a9fe4bb64e402202e9e1e6fa7e3314183d61063b1dd265215f7b029757cfbf8df3cf1128ed78a190076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001825d22057b000004030047304502204ab992f07ddbae6674416305085f067f616660f6879dc9e72676592f8bc41922022100b5b189a2e84ea2ddf727952bce29b14a0d745459fc09a59907cdc27e2f18d8820076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001825d22054500000403004730450220188b3318a67427d102f8b4f8ca794092f2797efbf42f21c340e4d4e8373f7df40221009811709491ed96e5230392191199982fabe8c6cf4fa88880da27ebc5d42f0e41007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001825d22057a0000040300473045022100cb1ea7d4380a37a3ecd4e7bcb05ce9ce76b7baf484ee6eb7ee0be50758ef3c5a022061eaf07b3a058b6e7138e43828096c0b43874c3f46fc45f13206094c5ecab2d0007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001825d220745000004030048304602210085381099a3253847ec0d7df0a853a68512e58cbc8c7057d05d3601bee0f019cf022100a1cb043e8f71d2cb2755b8ef4bbcebd2286a338979c8f2fb95ff1e0a3a386316007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001825d220565000004030047304502200a4780bcaeea08257f21908fc6f647c9d9e18375361100b63f1a80cf55086ad1022100d1e71218bf886117bd80732d318e36c61724e994175a0016a650334ea747a601
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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