oco.api.e01.uat.omnichannel.unicredit.it

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 48:62:f6:7f:db:26:cf:50:6b:8e:3b:a5:a8:70:e7:9d was issued on by Actalis S.p.A..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 48:62:f6:7f:db:26:cf:50:6b:8e:3b:a5:a8:70:e7:9d
Serial Number (int): 96218260391213628924536865848468498333
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fc:48:c5:18:4a:a6:f9:cf:ba:00:01:ae:81:26:a8:ba:6e:59:af:58
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): bc:36:c2:65:20:36:bf:be:59:46:fd:67:02:07:ab:45:ff:ca:33:0f
Fingerprint (sha256): 20:4c:22:8a:d8:f9:99:f5:e3:a5:10:d1:76:5a:b9:fe:42:cb:01:74:80:ef:be:d9:45:71:4f:24:6f:c6:d5:87

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate oco.api.e01.uat.omnichannel.unicredit.it

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oco.api.e01.uat.omnichannel.unicredit.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oco-ucx-em.callback.e01.uat.omnichannel.unicredit.it
oco-ucx-is.callback.e01.uat.omnichannel.unicredit.it
oco.api.e01.uat.omnichannel.unicredit.it
oco-ucx-ic.callback.e01.uat.omnichannel.unicredit.it

Other certificates including the domain name unicredit.it

(limited to 100 certificates)
www.buddyunicredit.it
gestionedelibere.unicredit.it
www.unicredit.it
processihr.unicredit.it
api.f4p.uat.unicredit.it
res-findata-uj-v3.unicredit.it
content.unicredit.it
www.empbw.unicredit.it
openaccount.unicredit.it
online-smallbusiness.unicredit.it
more.unicredit.it
www.premiocerto.unicredit.it
unica.unicredit.it
tls12.unicredit.it
ebanking.qc.unicreditgroup.de
globe.unicredit.it
akamai-san133.exacttarget.com
assistenza.unicredit.it
ucilearning.unicredit.it
finance.unicredit.it
www.unicredit.it
media.investimenti.unicredit.it
bankingonline-uccmb.unicredit.it
corporateportal.unicreditgroup.eu
mail.unicredit.it
clubgrandiaziende.unicredit.it
msite.unicredit.it
shop.unicredit.it
mbv.unicredit.it
pagamenti.unicredit.it
shop.unicredit.it
m.unicredit.it
trasparenza.unicredit.it
push.unicredit.it
onlineretail.unicredit.it
push2.onemarkets.de
www.circoloUdine.unicredit.it
geb.unicredit.it
unicredit.it
finance.unicredit.it
www.circoloBari.unicredit.it
m-uat.unicredit.it
imprendo.unicredit.it
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
clubgrandiaziende.unicredit.it
lifedesk.unicredit.it
mailing.unicredit.it
www.circoloGenova.unicredit.it
www.landing.unicredit.it
res-findata-m-v2.unicredit.it
guest-wifi-mi.unicredit.it
mlocator.unicredit.it
digital.api.unicredit.it
www.landing.unicredit.it
ebank1.unicredit.it
assistenza.unicredit.it
ucilearning.unicredit.it
dimensionesociale.unicredit.it
mailing.unicredit.it
online-subitobanca.unicredit.it
online-retail.unicredit.it
www.unicredit.it
push2.onemarkets.de
sha2.unicredit.it
www.unicredit.it
corporateportal.unicreditgroup.eu
push.unicredit.it
openaccount-online.unicredit.it
www.gestionedocumenti-online.unicredit.it
trasparenza.unicredit.it
confidi.unicredit.it
www.buddybank.com
more.unicredit.it
ucilearning.unicredit.it
onlineretailbank.unicredit.it
www.unicredit.it
cyberfunds.unicredit.it
www.unicredit.it
unicredit.it
pagamenti.unicredit.it
newrsvp.unicredit.it
likeu.validazione.unicredit.it
mail.unicreditgroup.eu
click.aziende.unicredit.it
processihr.unicredit.it
onlineretailbank.unicredit.it
private.unicredit.it
online-retail.unicredit.it
www.unicredit.it
www.investimenti.unicredit.it
invoicecomm.unicredit.it
oco.api.e01.uat.omnichannel.unicredit.it
www.landing.unicredit.it
ial.unicredit.it
bankingonline-uccmb.unicredit.it
in-formati.unicredit.it
ebanking.unicreditgroup.de
www.circoloAncona.unicredit.it
mailing.unicredit.it

Certificate

The complete raw certificate details for oco.api.e01.uat.omnichannel.unicredit.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96218260391213628924536865848468498333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 12:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-29 12:08:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oco.api.e01.uat.omnichannel.unicredit.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845908331989890178132890300412030707608871298066337460800073277640149418776407570974873745278815725907229865127529217885957345552279616628483232864170968618354861457896359730189273333369191902169078932298007000589632858635782702921990122031786295732622101436455536700624052449100310112183530380898468031305705551854753130315170580989686390973969996149720047930020113174444542657039801769011435486229020188433308170332530939256746999042823244604777826644839702462686827423998019452142793676645060794527251130332181456176113045778035783389629025520144492523480273627635337937998231383170479338864387016732772168848137180489198958863488895561944390283072077171847932193910169522526751842767679347009027657735170509412750188514444790183690751062391570503294235802851475738301732748141433495428012734598394231220839117080614858652711581195242720725774792013822019790974706759602697295073090067855803217367836732818630168095425666085844254972586241660727816331934281132187900858395616584977170272485695914240592532783073891803648429273904222359913737992524021331130938506222707406150958934842642109321539424070654062880282785843940035331098791593043402654074275674719137058464800201736863207160588604369907886135282066616259562312785569751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oco-ucx-em.callback.e01.uat.omnichannel.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oco-ucx-is.callback.e01.uat.omnichannel.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oco.api.e01.uat.omnichannel.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oco-ucx-ic.callback.e01.uat.omnichannel.unicredit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc48c5184aa6f9cfba0001ae8126a8ba6e59af58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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