login.eduid.ch

- SWITCH -

Issued by QuoVadis EV SSL ICA G1

About this certificate

This digital certificate with serial number 24:34:c7:fb:c0:1e:cb:4e:e6:34:bf:90:9c:1a:ea:9a:1a:e0:69:01 was issued on by QuoVadis Limited.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SWITCH

Company registration number: NTRCH-CHE-101.494.993
Organization: SWITCH
State / Province: Zürich
Locality: Zürich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 24:34:c7:fb:c0:1e:cb:4e:e6:34:bf:90:9c:1a:ea:9a:1a:e0:69:01
Serial Number (int): 206700727511128000397041475283141010070257559809
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 64:ff:3c:60:1a:76:1b:1f:a4:6a:5a:0b:2a:34:e6:f5:ae:24:7d:df
AuthorityKeyId: 55:58:86:ce:ba:7c:76:4e:99:13:a9:0f:d3:6c:9f:c2:f5:d3:3c:e3

Fingerprint (sha1): a0:9b:79:35:88:49:52:55:00:a3:f3:85:86:b9:a4:1a:b9:f7:cc:eb
Fingerprint (sha256): 21:44:93:7f:5c:4b:61:2e:40:0e:74:23:1d:71:5a:a3:cd:68:14:b1:b3:8c:9d:68:1e:74:27:4a:44:1f:3a:2e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevssl1.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevssl1.crl

Check the revocation status for certificate login.eduid.ch

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.eduid.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.eduid.ch
login.switch.eduid.ch
fernuni.login.eduid.ch
slsp.login.eduid.ch
switch.login.eduid.ch
unifr.login.eduid.ch
unilu.login.eduid.ch
unisg.login.eduid.ch
zhaw.login.eduid.ch
zhbluzern.login.eduid.ch
zhdk.login.eduid.ch

Other certificates including the domain name eduid.ch

(limited to 100 certificates)
io.gdi.lenovo.com
node1.login.test.eduid.ch
status.republic.com
node21.webauthn.eduid.ch
login.eduid.ch
login.test.eduid.ch
idp-db.eduid.ch
login.test.eduid.ch
idp-db.test.eduid.ch
altastatus.us.veritas.com
status.republic.com
login.test.eduid.ch
login.eduid.ch
status.greenewx.com
test.login.eduid.ch
login.eduid.ch
node2.lb.trid.switch.ch
node2.lb.trid.switch.ch
login.eduid.ch
login.staging.eduid.ch
status.admiresty.co
idp-db.eduid.ch
login.staging.eduid.ch
uern.d5n.is
aai-login.eduid.ch
node1.lb.trid.switch.ch
status.alogna.co.ao
mfa.test.eduid.ch
login.test.eduid.ch
status.conpds.com
status.conpds.com
login.eduid.ch
login.eduid.ch
status.greenewx.com
eduid.ch
node1.lb.trid.switch.ch
ap-api-fernuni.test.eduid.ch
uern.d5n.is
login.test.eduid.ch
cinc-status.tkelevator.com
comanagetest.eduid.ch
status.linkmanager.ai
status-v3.knowledgeforce.com
status.h2.tc
io.gdi.lenovo.com
idp-db.test.eduid.ch
status.greenewx.com
node2.lb.trid.switch.ch
login.eduid.ch
node2.lb.trid.switch.ch
status.greenewx.com
api.eduid.ch
eduid.ch
status.huntervoip.com.br
status.linkmanager.ai
switch.login.staging.eduid.ch
zhaw.login.staging.eduid.ch
login.staging.eduid.ch
login.eduid.ch
dun.im.4pple.org
status.ioneaccess.ch
status.alam.earth
login.eduid.ch
eduid.ch
proxy-login.eduid.ch
node2.lb.trid.switch.ch
status.republic.com
ldap-slave1.test.eduid.ch
status.sumex.ch
status.linkmanager.ai
login.staging.eduid.ch
status.linkmanager.ai
status.greenewx.com
status.linkmanager.ai
proxy-login.eduid.ch
node2.login.test.eduid.ch
login.test.eduid.ch
proxy-login.eduid.ch
mfa.eduid.ch
login.eduid.ch
altastatus.us.veritas.com
eduid.ch
ldap-slave1.eduid.ch
login.test.eduid.ch
login.test.eduid.ch
io.gdi.lenovo.com
login.test.eduid.ch
status.conpds.com
altastatus.us.veritas.com
status.linkmanager.ai
test.eduid.ch
io.gdi.lenovo.com
unisg.login.staging.eduid.ch
status.huntervoip.com.br
status.nicksaude.com.br
malincdb.switch.ch
uern.d5n.is
node1.lb.trid.switch.ch
cinc-status.tkelevator.com
api.test.eduid.ch

Certificate

The complete raw certificate details for login.eduid.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78YAVDr7v+Cp/DJ3V2fE
fxQwpTHm4MjEWJRgwY2OvVPRadGXnkxQ3vJRZDaUUz9TgjWeVTi4XhO5xy5fxhoz
3v7wKz/rxnM3s3I1ZFaKWDTL4P66NO6uaYxgG6hObaqIBhXj4BCARZZ9oG1A3INZ
/UD+l7XHDctsQv1u7q2Q9S/NaUOJa1nz5LMsINDuK4Zlec/E08AmznraRhkFOCkf
BIFX0q6LaDM3KeAQ5OKyDHpD8j09Fd0pClHiz84c0oD0auAPQW+khrYNYqonPcl0
owYtVXwsT2KazGfl9rxS2bG5COxWdBvP/4IPEdTTnE3Bi9PkfX7P+3Oz3QHix6Hf
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 206700727511128000397041475283141010070257559809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis EV SSL ICA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 12:18:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-26 12:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTRCH-CHE-101.494.993'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SWITCH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'login.eduid.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30268592959667548541657230749765774636925047692376899993322643740826627155949302188855832259488300921275642238928422228262701422676611330337727661129009231099726664011533189840382056428126544810651101407231959932447379078193820356321517752876657264789682795853807235277944943729000345963124332901064197911804206866404766485259100689807990145650638071174729688888838830368888692364361241192744880303321918347435198208152217694980119027769818598333522092570612612235303824409996094447974296487781786331232822696359949096732191629244941701097209735007208424376868998980005863109193865039412073869254726583039115378417431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 555886ceba7c764e9913a90fd36c9fc2f5d33ce3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevssl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.switch.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernuni.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsp.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhaw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhbluzern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhdk.login.eduid.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevssl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64ff3c601a761b1fa46a5a0b2a34e6f5ae247ddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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