hbci-01.hypovereinsbank.de

- UniCredit Bank AG -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 15:91:42:b3:f5:cd:bd:5f:45:33:0e:4c:44:db:75:eb was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit Bank AG

Organization: UniCredit Bank AG
State / Province: Bayern
Locality: München
Country: DE

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 15:91:42:b3:f5:cd:bd:5f:45:33:0e:4c:44:db:75:eb
Serial Number (int): 28668023852918265884624115113479861739
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 71:78:05:c6:1a:88:f5:2b:79:46:10:07:55:13:f8:8c:af:31:ba:7d
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): c2:7e:20:13:2d:aa:69:08:51:a4:52:69:cf:95:5c:de:6e:b9:f2:1d
Fingerprint (sha256): 1b:19:d7:b7:2e:cf:e8:09:f2:3c:8d:da:a6:d2:e8:c9:4a:bb:b5:d7:f2:6c:b9:27:f3:3f:15:68:97:70:87:93

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate hbci-01.hypovereinsbank.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hbci-01.hypovereinsbank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hbci.hypovereinsbank.de
hbci-01.hypovereinsbank.de

Other certificates including the domain name hypovereinsbank.de

(limited to 100 certificates)
www.hypovereinsbank.de
pfp.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
produkte.hypovereinsbank.de
communications.qa.hypovereinsbank.de
hbci-01.hypovereinsbank.de
blog.hypovereinsbank.de
res-findata-uj-v3.unicredit.it
angebot.qa.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
webtraining-qsu.hypovereinsbank.de
banking4business.hypovereinsbank.de
www.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
communications.qc.hypovereinsbank.de
ucforms.qa.hypovereinsbank.de
my.hypovereinsbank.de
about.hypovereinsbank.de
forms.hypovereinsbank.de
workingcapital.hypovereinsbank.de
virtuals.qc.hypovereinsbank.de
mcatalogue.hypovereinsbank.de
ial.unicredit.it
hbci-01.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
sucmetrics.hypovereinsbank.de
kampagne.hypovereinsbank.de
communications.qc.hypovereinsbank.de
hypovereinsbank.de
forms.hypovereinsbank.de
ddx.qc.hypovereinsbank.de
finanzkonzept.hypovereinsbank.de
contact.hypovereinsbank.de
MQ.GET.HVB.HV.GWXIGW00.MQEXTGWGET.HYPOVEREINSBANK.DE
www.hypovereinsbank.de
multiweb.it-v.hypovereinsbank.de
geschichte.hypovereinsbank.de
privatebanking-standorte.hypovereinsbank.de
il.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
communications.hypovereinsbank.de
akamai-san228.exacttarget.com
www.qc.hypovereinsbank.de
hypovereinsbank.de
press.qa.hypovereinsbank.de
immobilienfinanzierung.hypovereinsbank.de
kredit.qc.hypovereinsbank.de
tpas.application.hypovereinsbank.de
res-findata-hv-v2.hypovereinsbank.de
hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
hvbforms.qc.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
ucforms.hypovereinsbank.de
dossiers.hypovereinsbank.de
www.qc.hypovereinsbank.de
hypovereinsbank.de
click.news.hypovereinsbank.de
stats.hypovereinsbank.de
dossiers.hypovereinsbank.de
www-gimb.qc.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
antrag.hypovereinsbank.de
communications.hypovereinsbank.de
ratenkredit.hypovereinsbank.de
webtraining.hypovereinsbank.de
angebot.hypovereinsbank.de
hvbforms.hypovereinsbank.de
antrag.hypovereinsbank.de
upload.hypovereinsbank.de
uat.omnichannel.hypovereinsbank.de
euroweb-sin.application.hypovereinsbank.de
kredit4business.hypovereinsbank.de
geschichte.hypovereinsbank.de
hbci-01.hypovereinsbank.de
forms.hypovereinsbank.de
my.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
akamai-san228.exacttarget.com
virtual-reality.hypovereinsbank.de
kredit.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
tpasgw.application.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
www.hypovereinsbank.de
ebics-clearing-itu.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
services.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
empfehlen.hypovereinsbank.de
pfp.hypovereinsbank.de
allianz.hypovereinsbank.de
antrag.qa.hypovereinsbank.de
ebics-clearing-qsu.hypovereinsbank.de
retailevents.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de

Certificate

The complete raw certificate details for hbci-01.hypovereinsbank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQdDcMATda7le1CGFCM1
3+Z6Hpk9GkVl4z+dCHRPETy6K3KllLC0gy/WXlgAElY9gZi0pQGPJoOCfWZoF51Y
Brbm0Go5yLZMeNV4oZufklIXmuSG1STzkUC/cOZZtM/bfjm0afMimPUNbES5IAGE
BgHCMjtBFBL7gzXTZBZRAiW/DfCkQ+Qm1DSPNOMYhChkF3mDQWm20miW1z/mgXAb
1YZpNiywLpxnbNlN3lCcBJ1633fdgIkdocLhxVWVO7AhH0lp6gv+UrXVG0uzc7OO
vioQCnjlgxrEiyvr0INyuiuPAa+8MN6Ch+cQ4zzlQrw1RSCZc0lPR/31T9uIBHMi
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28668023852918265884624115113479861739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-15 12:31:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 12:31:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hbci-01.hypovereinsbank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22852714934210851537387658112467904600092484513245968629616335831555671870147973797064716424393077912584292708959761250163846179951350685131701583990662271616664180504558743696643604468873999212807097590092507906915327118508650045454428850770391160913601974514411528540569721989801192468660784459371669160161644982619764422909950161638264782630951741232350240886630998375005574843602243220301190908527536119160923212865662115067079658908035807522138582395299822352139663608569213692051383645975414455978694580167960506581634655480989624428685959361011316592560293637667633397745410411737807721772718698400041328124671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbci.hypovereinsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbci-01.hypovereinsbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							717805c61a88f52b794610075513f88caf31ba7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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