nza.nl

- Rijksoverheid -

Issued by QuoVadis PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 32:ba:c3:eb:ca:62:12:a4:73:70:8c:47:3d:b4:91:60:71:13:8b:18 was issued on by QuoVadis Trustlink B.V..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksoverheid

Organization: Rijksoverheid
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 32:ba:c3:eb:ca:62:12:a4:73:70:8c:47:3d:b4:91:60:71:13:8b:18
Serial Number (int): 289614544279244870137825618812355664990077946648
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 30:f8:02:af:99:97:d6:5f:69:41:bd:de:d3:c7:5f:29:59:d9:1a:cb
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7

Fingerprint (sha1): 70:b2:0b:05:88:af:df:27:25:79:e0:4d:8b:7a:bf:04:8f:c6:97:37
Fingerprint (sha256): 19:79:cb:7f:38:c4:bc:37:18:d6:2b:2d:e1:29:f6:6b:78:33:b7:b1:6a:89:3b:c0:98:e3:9c:95:4f:34:c5:fe

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl

Check the revocation status for certificate nza.nl

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nza.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nza.nl
www.nza.nl
feeds.nza.nl
opendata.nza.nl
magazines.nza.nl
meldennieuwezorgaanbieders.nl
www.meldennieuwezorgaanbieders.nl
feeds.meldennieuwezorgaanbieders.nl
opendata.meldennieuwezorgaanbieders.nl
wtzi.nl
www.wtzi.nl
feeds.wtzi.nl
opendata.wtzi.nl

Other certificates including the domain name nza.nl

(limited to 100 certificates)
www.nza.nl
zorgproducten-test.nza.nl
customerportal.uk.rlb.com
www.werkenmetdbcs.nza.nl
systems.squaredup.com
dbcregels.nza.nl
adfs.nza.nl
praatmee.nza.nl
zorgproducten-test.nza.nl
*.nza.nl
hub.theriderfirm.cc
dbcregels.nza.nl
nza-portaal1.nza.nl
servicedesk.esmsglobal.com
nzarpsamd001.nza.nl
nzarpsamd001.nza.nl
service.littlegarth.org
nza-form6.nza.nl
www.nza.nl
leren.nza.nl
dkdlmodel.nza.nl
zorgvraagtypering.nza.nl
nza-form5.nza.nl
uitwisselportaal.nza.nl
zorgproducten-test.nza.nl
customerportal.uk.rlb.com
hybrid.nza.nl
tarievenzoekerzorgprestatiemodel.nza.nl
dkdlmodel.nza.nl
support.homeinstead.ie
zorgvraagtypering-test.nza.nl
dbcregels.nza.nl
meldingsformulier.nza.nl
nzarpsamd001.nza.nl
nzarpsamd001.nza.nl
dbcregels.nza.nl
zorgclustertool-test.nza.nl
nzarpsamd002.nza.nl
nzarpsamd001.nza.nl
zorgproducten.nza.nl
www.nza.nl
zorgproducten-test.nza.nl
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
zorgproducten-test.nza.nl
zorgproducten-test.nza.nl
nza.nl
servicedesk.coram.eu
uitwisselportaal.nza.nl
zorgcijfers.nza.nl
sd.srk-zuerich.ch
zorgproducten.nza.nl
login.nza.nl
nza-form2.nza.nl
mijn-accp.nza.nl
helpdesk.sunlight.gr
support.brill.com
portal.nza.nl
www.werkenmetdbcs.nza.nl
dbcregels.nza.nl
support.homeinstead.ie
nzarpsamd001.nza.nl
leren.nza.nl
helpdesk.itwfasteners.com
dbcregels.nza.nl
nzarpsamd002.nza.nl
mijn-accp.nza.nl
nzarpsamd002.nza.nl
nzarpsamd001.nza.nl
dbcregels.nza.nl
wireless.nza.nl
nza-portaal1.nza.nl
zorgproducten-test.nza.nl
zorgcijfers.nza.nl
uitwisselportaal.nza.nl
nza-form1.nza.nl
zorgproducten.nza.nl
nzarpsamd002.nza.nl
dbcregels.nza.nl
www.werkenmetdbcs.nza.nl
zorgproductenviewer.nza.nl
adfs.nza.nl
mta-sts.nza.nl
acceptatie.crm.nza.nl
owa.nza.nl
zorgclustertool.nza.nl
adfs.nza.nl
l1.platformrijksoverheid.nl
werkenbijde.nza.nl
ithelpdesk.koinly.io
nzarpsamd002.nza.nl
nieuwmodelggzfz.nza.nl
aanvragen.nza.nl
customerportal.uk.rlb.com
nzarpsamd001.nza.nl
nza-form3.nza.nl
l1.platformrijksoverheid.nl
helpdesk.sunlight.gr
wachttijden.nza.nl

Certificate

The complete raw certificate details for nza.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkdJY0m12DncoXg1HFtI
aNuFQKRiZaiKuruH3raARN2Ak8gn0l96Ko+qX5scDfvn/+PeX56IWhsRCMDYo0ZW
Xg+okDVaqH2WWnnNIlei9eMWfc+65OUZTfQcFi5dbIRHebC5oVG62iwa1MntGyla
Pt43rRxEC6zijASX5oVThaqWmOVZmFPTczjzDO2IU20ei5zV0+YmpxN/cbDFg5mW
tUTrw+JjUGZnfbNm919GaxkdL+MJ64zHAt0oyVsSXAerseWQUg8V1XZu35fLxunw
2fjKis87qaSZoEdkjmIGiz0uSjnyj6NB3umjqpq1DyGs1H5Q5n1oVEUvebqVIEMk
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289614544279244870137825618812355664990077946648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-07 10:56:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-07 11:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nza.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23010524271584344666402838103771630567642971606347371806801992531038620302578428912933601707019505193147039561864242641778704859991436956420966922382464869058520503337403011518268247099485815282150446231825464721549027943538253552046044250776807436154418118577102322468060808960976777576871415552296455077279423013651357144491558795001131335031326608240892297836791935557074417642278010487980835741762131589712208722257916638476106262338392148590320045199927147069710737257078747153974181817218012414161934604911128157211523549478915836914196201522738635609505934043004942784957391735053670399237502234080740211106941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nza.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nza.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.nza.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.nza.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.nza.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meldennieuwezorgaanbieders.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meldennieuwezorgaanbieders.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.meldennieuwezorgaanbieders.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.meldennieuwezorgaanbieders.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtzi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtzi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.wtzi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.wtzi.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30f802af9997d65f6941bdded3c75f2959d91acb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017a80a5fca90000040300463044022051ffdaf8be7d89be2682918a1624f7a13fdd9714e047aa1a269654a9215ff119022026e12bcde4b47f46cfb12b616a562b7d5beff3efbbe00fbba43564518d27efc400770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017a80a5fc6f0000040300483046022100d1b985e1d7b6d122f889a6e460dd3c0ec8d75784bff6b651e1914d518f07eb73022100cda7d70c37d3690f26453321503325c2b057358a964b75177a594e3d82812c5700760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017a80a5fd680000040300473045022100f5abfce3e621b82c36f2815233c2e5bc3a2285f21eb40e0166d537a6d8883b2302205bd0585113819ab623d17fde7d3a66b97eff555d8df5e75dfd6ee668e40a8c7700760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017a80a5fce9000004030047304502207a9d267c89c25820badfff1a74be71f2b067f48105edced528615e42c65d2d9e0221009dd8e95dab851e157bc42ae440807c579232ba7ac420926df5769d86231c973a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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