Ålands Penningautomatförening

- Ålands Penningautomatförening -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0f:1a:5a:7d:ed:b6:b1:9d:81:73:cd:8a:ee:90:8b:e5 was issued on by DigiCert, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Ålands Penningautomatförening

Company registration number: 0280695-6
Organization: Ålands Penningautomatförening
Address: Lövdalsvägen 8
State / Province: Åland Islands
Locality: Jomala
Country: FI

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:1a:5a:7d:ed:b6:b1:9d:81:73:cd:8a:ee:90:8b:e5
Serial Number (int): 20075255049049097136442209801352547301
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:7b:79:47:9e:7f:92:f0:ad:32:6c:33:87:c6:1c:6c:99:38:18:1e
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 8b:1d:60:6c:03:6b:6a:c6:ed:3a:5d:be:28:07:8e:5e:3a:46:60:ed
Fingerprint (sha256): 2a:16:b2:5c:29:10:45:72:e7:11:6d:2b:0a:cc:4e:9c:4f:d2:44:19:9a:8a:14:ae:5c:78:bb:56:9a:0e:39:d2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Ålands Penningautomatförening

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Ålands Penningautomatförening

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paf.es
pafbet.lv
paf.com
paf.se

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Ålands Penningautomatförening in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2r26bfx0wqTABseWXyr
7deoQmFczJP8KwY70UbdseGQ4MI8yRpmst0vA50IGvGoo6E0eh+XOiphH6xoo+uZ
9gLB/3yE1Q0QO8aFoZ6kdZgKhqVK0o1SEP9v7Q50yRYwna2Od9pDW5M+p7/PTuux
nABH2APmsVNBIWIDdYATrqLtMpfksIbua8zfeeK7ljkO3aQRCewKieeO6VPtCNe5
TWxuglM/u7xzG52JvESo/vMq3OB5Oic0tUpawpUt8a8KagEFid4NcBzg4BelGhcs
D3Uad7JMoSiL4vR9c5Kh5F9RHZyK5xR4LnhgTZFLu2OQPn3DMrGMa3D/3wLlsQzf
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20075255049049097136442209801352547301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0280695-6'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Åland Islands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jomala'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lövdalsvägen 8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ålands Penningautomatförening'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ålands Penningautomatförening'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018480622'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20629589872148906798767150105586360029178641330007589908217474953978466470547142849023019922790048645572462708405999805951513391867856164155677770922605201609928796995875858405664185651749726975006576946588256786459999387045493723277052115336348429977737744004402300153825426307206568981462453323441330079678908678900752132488861327493591117841970725733213214690305453193072392780149760340381713413475167735312560894325390516463521807462076424430172293812701709933515555438367077586105023981531910277024204742171376272206021189631633618580557177629669453662339617265901299615461696986176898754926555609365375120891687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d7b79479e7f92f0ad326c3387c61c6c9938181e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paf.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pafbet.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paf.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (906 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															5c6c6f322a11a6dcc9fe78d11aed15a0965878cf
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAACrVTy27bMBC85ysI9kpSWj5EspActAZySoEemg9wZNUR4MiGJdhJv76zdNv00F4KVIBIkdyd3Zmh2tuX5704D6d5PEydJFNLMUz9YTtOu04+fLnTSYp52Uzbzf4wDZ18HWZ5u7pp5/Pu9zQrxXkcLh8PL52sRS1sXV4pHjfz8Pl0+DrukbyM06s+zlKg6DR38mlZju+r6nK5mIszh9OuQk5dAVuK1Y0Q7TIu+2H1OD6PGpu65JMFRFtdjzhoxyPm42Z5EttOfiLnTVTOGbtOwTgVTaNsxhY1PNRYBmeaXlMyWbnGeOVNUok/glNE1rieo2okkyHMSMNbm4xCPc6jahg0IB94AEkAINcDLKtGRWTpRnF1jT782tbJBIRmHhPKcOW3Pu/fPr9JAbH2nXx3Vx5Z/Q9660BYkScEI4KwCxOvMDkxSR1M0MxNR5CwoI+drB0yoE3CAlVxkjntOvfBeE0eB6icNNSJLAxpwPreBdYEh5EH8ipbzB7Fi6bchLM/xG4cioNmULE21OtCynIXUJmP4IDGPnhp0rzrufR13gPLMtZf7UDBf3Ok9uTzHxy5kqbYg2CCHOjJFV2spsy44M/KZM1nljWB3pkpRm2LWQm9lQjYxE0yHlYezIs+xQflMvAd88wckcHRggA77FRig/nKQp1e1yjeaLaGDS/mUTSZjY1wCx0Ebg9msFOZGy3Go/PMFJQt14nvv+OKlq8NoQGvUiy3nRtiAcHvpwD3v77eVLPhw7qhq2pthb+15T989R0QI3rFewQAAA=='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00523935d0d197b5ec2fe258e3387b0e0f80d522f1bf18b1969ee3f559630e0637ae7ed68d74379ace88dac969490ca36b03d8f5a1b3b359772df99ac26ad567c10bd0a5fe1ea1dc00155be03ec7b31e58542aa3e4398cb47f039353c7f4c56d073620caafd7195175e7344faac6ff421fc4ba14a6621e03e1b7cd46da7527538bebcec880e41d31caf75c6abc57a45edfc40bb40c6e5579ff62f7091e20497058799f74ac9675a22c7105ef7e427ddd3b80bd2812d5dc929e33dbd1a476ed8a64b3e2e6a954f11f730354590495edbcf84a8fbd0a119a50fe6caae60a17d91aef482441958a80297cf2e8da86d883e498bf426b95b07c3ea11437104ad87bdcfff199098198117919c01ed808c099cc0952f3a857f6ff9fe0106d54bb22aa33ccd5555e17f98a2393ab092d37810d087959460a915fb437e2a61ada062e98772f1ffd6770d7d0312f3d4045f230b424ff71c35dc2e7cf01bbc1235328e29ebacaa4989041ee2b547ff86233aaae3a621716beff6ba61e5e34ddf5e730d314b6db2ba0c03dbaf14910114ea27c0effccc939dc3b3d77f4684699aa34c716c583052ea34a970e91abde83329392d559b841fcb34cc5d6cb355fd0c52e833b0577d56a6cf7e34f688dafd5dcad821335ff6c864f00aad865a06c87513842b2af32326ad3d21cd11870be308f85dd17cdb66a5cc1c586b5d6c6b6f3a9ab111c94c2c3