upload.hypovereinsbank.de

- UniCredit Bank AG -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 12:aa:c9:9a:95:6f:b6:f6:41:e6:a0:c8:c5:e8:76:ca was issued on by Actalis S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit Bank AG

Organization: UniCredit Bank AG
State / Province: Bayern
Locality: München
Country: DE

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 12:aa:c9:9a:95:6f:b6:f6:41:e6:a0:c8:c5:e8:76:ca
Serial Number (int): 24812883401795088834287137391936829130
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: cc:f6:37:64:34:e2:91:cf:05:b8:4d:cd:0e:2c:6b:42:a9:98:af:14
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 10:53:73:dd:a0:8a:5b:0e:b7:fd:6e:3d:00:00:73:2c:41:7e:26:a2
Fingerprint (sha256): 1a:91:1b:19:b7:22:cb:72:08:33:99:03:5f:e1:c7:1e:bb:14:e0:6e:fc:fd:30:72:f3:ec:54:53:ef:00:d4:40

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate upload.hypovereinsbank.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for upload.hypovereinsbank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

upload.hypovereinsbank.de

Other certificates including the domain name hypovereinsbank.de

(limited to 100 certificates)
www.hypovereinsbank.de
pfp.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
produkte.hypovereinsbank.de
communications.qa.hypovereinsbank.de
hbci-01.hypovereinsbank.de
blog.hypovereinsbank.de
res-findata-uj-v3.unicredit.it
angebot.qa.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
webtraining-qsu.hypovereinsbank.de
banking4business.hypovereinsbank.de
www.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
communications.qc.hypovereinsbank.de
ucforms.qa.hypovereinsbank.de
my.hypovereinsbank.de
about.hypovereinsbank.de
forms.hypovereinsbank.de
workingcapital.hypovereinsbank.de
virtuals.qc.hypovereinsbank.de
mcatalogue.hypovereinsbank.de
ial.unicredit.it
hbci-01.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
sucmetrics.hypovereinsbank.de
kampagne.hypovereinsbank.de
communications.qc.hypovereinsbank.de
hypovereinsbank.de
forms.hypovereinsbank.de
ddx.qc.hypovereinsbank.de
finanzkonzept.hypovereinsbank.de
contact.hypovereinsbank.de
MQ.GET.HVB.HV.GWXIGW00.MQEXTGWGET.HYPOVEREINSBANK.DE
www.hypovereinsbank.de
multiweb.it-v.hypovereinsbank.de
geschichte.hypovereinsbank.de
privatebanking-standorte.hypovereinsbank.de
il.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
communications.hypovereinsbank.de
akamai-san228.exacttarget.com
www.qc.hypovereinsbank.de
hypovereinsbank.de
press.qa.hypovereinsbank.de
immobilienfinanzierung.hypovereinsbank.de
kredit.qc.hypovereinsbank.de
tpas.application.hypovereinsbank.de
res-findata-hv-v2.hypovereinsbank.de
hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
hvbforms.qc.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
ucforms.hypovereinsbank.de
dossiers.hypovereinsbank.de
www.qc.hypovereinsbank.de
hypovereinsbank.de
click.news.hypovereinsbank.de
stats.hypovereinsbank.de
dossiers.hypovereinsbank.de
www-gimb.qc.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
antrag.hypovereinsbank.de
communications.hypovereinsbank.de
ratenkredit.hypovereinsbank.de
webtraining.hypovereinsbank.de
angebot.hypovereinsbank.de
hvbforms.hypovereinsbank.de
antrag.hypovereinsbank.de
upload.hypovereinsbank.de
uat.omnichannel.hypovereinsbank.de
euroweb-sin.application.hypovereinsbank.de
kredit4business.hypovereinsbank.de
geschichte.hypovereinsbank.de
hbci-01.hypovereinsbank.de
forms.hypovereinsbank.de
my.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
akamai-san228.exacttarget.com
virtual-reality.hypovereinsbank.de
kredit.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
tpasgw.application.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
www.hypovereinsbank.de
ebics-clearing-itu.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
services.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
empfehlen.hypovereinsbank.de
pfp.hypovereinsbank.de
allianz.hypovereinsbank.de
antrag.qa.hypovereinsbank.de
ebics-clearing-qsu.hypovereinsbank.de
retailevents.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de

Certificate

The complete raw certificate details for upload.hypovereinsbank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGY3760svoCg21XWbUpQ
glfj47lXZdvsI+/RcL5tXr67w6ysxUmoop7eJZcnnE66c4UJSKHoZ1qyGBSR+jaS
ES2Tcw9cHXPc/HW5T5kaxS1aGgMPx1Tcq5fEuDAwtOfBndzcn7HXzdhCQmjSVd0G
vANIzMIVbg53Ig9nQ/mYDYhIdN4F5eCYILCDhA+i44iEZvyPZyn/PePtbAv/k/7y
sUIHGbGYCFUP69UHceYr9Ubk+DTNxh4rj4XtRzvwnMfrnZPnt2VZEB2CBfVjawV0
sxVr4yM++t5xVlTjAqCtA1RV82rICYv9gHq0ywa+Qr8MdjRIJT1wAFsI00+kfdVo
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24812883401795088834287137391936829130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 13:12:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 13:12:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'upload.hypovereinsbank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24288160374938886116512547326203379962916722805723810473376604071739223604943445172881346046395534477846076799898303096861219872944208644315491510879797622015110881939497543046151496370098421262117889139544899789526733734002076378012518607415885215900603560196389642557832799495636769198833330697927918115484766222448221186718322181583438531523028195166888277315709948067649391854775643344954718093147960427301093050206220511448122168921579570066223812970378263423320133422027367818130185809283841726046999228550649612495502433076827558973454843410602348858865386078209574932844309468012583188285803594943594356893933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.hypovereinsbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccf6376434e291cf05b84dcd0e2c6b42a998af14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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