lu15388.lucorp.ch

- Luzerner Kantonalbank AG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 73:83:b2:52:5c:2e:c5:d7:c6:ac:96:cf:1b:f8:b2:ec:a1:62:44:5b was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luzerner Kantonalbank AG

Company registration number: CHE-105.845.092
Organization: Luzerner Kantonalbank AG
Address: Pilatusstrasse 12
Postal code: 6003
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 73:83:b2:52:5c:2e:c5:d7:c6:ac:96:cf:1b:f8:b2:ec:a1:62:44:5b
Serial Number (int): 659470870278330831757148229776346762002441585755
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5d:10:12:3a:ca:e0:4f:a0:f6:88:d1:77:63:23:a3:70:15:17:bf:8a
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): 78:c8:34:08:e8:99:32:59:00:83:74:88:5c:2a:c5:98:20:0c:1c:62
Fingerprint (sha256): 22:6a:7e:21:2d:1f:42:32:12:e5:98:a4:49:ea:23:67:9c:6c:4a:2d:10:31:fb:2f:26:73:0a:43:43:50:02:5c

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate lu15388.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lu15388.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lu15388.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for lu15388.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 659470870278330831757148229776346762002441585755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 12:02:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 12:02:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pilatusstrasse 12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.845.092'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lu15388.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799445215987988107174009855351931747381528078357353959889888107032408978141484062734434115529924116763405235012314949632736936434612315147996806461374759631653675120283122716446348656487811595308695097740265762699197941315763496044654566017448614662685656135549259449238346417481121498187331411832954077348961544064130856932868188624076696894562766326267861777021666801788687993409654758551284413677359986363350253447720676966129211925730136987030210589892096368724236975130608799408106736783776028159947557922576727897466747412676279499774669299099302722496190499693209188782640176053999353640770910983445231472573123941026511744880941171866708585270697437456972293624088556223840084870672335607605710932757817715191372901086256096144230386502518937090904170339542930197385229929874616528347757713059376554287583871437769245018373690928864809677932748926945620879039661358656515353616041354524606880407282667717212833494557337035684559765364853406672182158676287065965246021014633071765711013167569772834254242000348516882135873817305873036432503097321537101222413415688425184384659783006145031496903598117289929622114834661180193326797936267377431843781201555065549522194147052000785531724552276685084443446987156487105677206542469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu15388.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d10123acae04fa0f688d1776323a3701517bf8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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