C & A Services GmbH & Co. OHG

- C & A Services GmbH & Co. OHG -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 04:47:14:3e:17:8c:22:95:0a:91:15:1c:be:c6:77:30 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

C & A Services GmbH & Co. OHG

Company registration number: HRA 12655
Organization: C & A Services GmbH & Co. OHG
Address: Wanheimer Strasse 70
Locality: Düsseldorf
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:47:14:3e:17:8c:22:95:0a:91:15:1c:be:c6:77:30
Serial Number (int): 5685975627721353321461985466242201392
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f6:eb:3e:62:30:ae:e2:85:85:18:f4:24:38:7a:b4:0d:42:9d:8b:08
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 85:d7:64:ed:9f:db:d2:2e:49:ac:38:a4:a8:de:f7:8f:4d:46:aa:2b
Fingerprint (sha256): 2a:82:78:e3:0b:b9:64:0e:d3:48:7b:be:55:01:35:f1:6e:4d:6c:09:00:48:e5:ff:04:92:96:e8:dc:e9:0b:56

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate C & A Services GmbH & Co. OHG

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for C & A Services GmbH & Co. OHG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canda.com
shop-canda.com

Other certificates including the domain name C & A Services GmbH & Co. OHG

(limited to 100 certificates)

Certificate

The complete raw certificate details for C & A Services GmbH & Co. OHG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vEVT2pTOdLulprksGRu
J0UO24mJ0ZX7OzDV/4Ipk8Bd4NZhrsQAUB1VHE0F3ZwNRg6IAPG/D6q7O2P3FX5G
6t7dYAJvMDkT7vnxSVUxoTIjoSEopJuSBTan63fJKy8DOu+j5KOGguqZIfI3mnCO
VGdcJRtbJ99lN2ACt+390CsW4Sptb9ujkdb9N7Ksp/hdNzoXpuUmCmPNxMgRGHon
rozCFhH8f86U4IFPH/xz0V2ibYPD2LklkrRpT/+zugkuJuQvfDy+h64aBXan9dt0
9P77gyOPhw60MVann3F2xe7zCg5PwILYYm3XOMEn2z4L5RvQc2EB7GlVeAdd2QmP
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5685975627721353321461985466242201392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Düsseldorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 12655'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Düsseldorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wanheimer Strasse 70'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'C & A Services GmbH & Co. OHG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'C & A Services GmbH & Co. OHG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018452270'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27133879840689887079887769130944973244987666491053064269629807371873919486096180325216431286858217986695790057108020913435307856191284751929774389451914640707480071202338331540512406732128638981144274168340752714159515427941755799050229705803917626826515593396268999038949272109475736411234316458788730367327546134100606868184959903165050118263606480056925507720680181384573575251198003680766901507000624738626868391048791950338197199875859571980291016319434782172842605829878682903519208627644797120241249914696537371919332829845218768934144000376427188903573014382736830701649123401017153036620787444406801062793163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6eb3e6230aee2858518f424387ab40d429d8b08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-canda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															23f91c2a9f262c60f074407dd2602b0a312baf4c
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAACm1VTW8bNxA9R7+C3VuBJUUOuVyuYTlojCIOEAMBCuRaKOuNJXQrCZIsO/31fW9WdnTIQUuKHzNv3rwZXr9/+Xc0p2F/WG83iyo4X5lh028f1pvHRfV0/G5L9f5mdv2btebjsBn2y+N2f2X+eNh+G8yncXw6HHXJiDhcrs1fXz+aP1922/3RfBmfHu2njXG6+HXycWWy8958eFqPD8b/boy1MH84PV6CkMp8Wx6GL/vt9/U4LKrjevPD7g6VWT8sqs/LH8P+71AZIN8cFtXqeNxdzefPz8/uObrt/nEu3vs5TJ6PXL2M680/vzoYuq6b6241e2dO6+H5w/ZlUXnjTQ7Cn5q4OuyWPWDs9sNh2J+G6ganr4/r4zjc3C43D0vzefu4vZ5PK7Pr3fK4MkB6L112oY4+uzza0LrWSnKptw1Xndjict25rGNoXO49/qa6cU0dkuv4EZ3dSulcrGMQnJSO3xh8fWEfiO6lwHotDS7AUoN5gJHiCuaxDtGVHuctPMNNsC02OGID5y18WSQRYJLNCirBbYvDkjLtnq37izk80XH0EX8jkLY9zAZGYAPDyK6zIhx6G3LtrRSsFGwLXUvsrYdfjSsEeJVAw4FYksNutAl0Zb3CET6a2TvADYgOhzyCwMmssx52mtrzvrqeJiC+U2az7SaiAa6QEXA6BpkOJA071K2LhBPJG48legNUT8u8iS0hZBfvYoRL3IFH3Mapmv6wO1paaJz0eg8cM5GMmm5ds8IEVAnv4otMwyKTHV2gP10tNeMCp8QEJnCYIJEtWC6WeQ0eZnAa90rNJIHDlpNVdA1g5zdodJ+ph1domdAiQioY20tws3crauM2IvoOWe349R3RCaO5yLa5T5JVmJ1aprwKFkYbiZvTOz3xn7lvhCFFKCecSHBPaGQGtsB5pBkX6bwLRCcggRth2qRsT8xMQvIZja6cr8rYgipE2TeQl9c0gil8qZqWcgHBXhVONsgiXJGCrEvQDQiNr+MBtxIrljXaMq4MTkTLmEmDeEuvUogaQpkUj7ElvpqcZHwnUWPSjpSj1+yyKJkxBiH1FIS8UWLDz6g4rmwWuuqUDt3W8ZWOeKZDzhd0HEUVe9YS/ddMdmDkJDdS26qjSXZZizKMLYskdJ6tiJXLUFUY1CLZKXcp+l51C19QNtZ5psCTtgpqKWfuoGNdTnvKnDy1hMEyVPWOlLO/bbRSY/EEdRYKvVyIBv0tC0NMCOzUZE3gRFh8jZvjCg1tyg2LKFLlrB0Gw3y32Gq10UWMzTSya1Fv4lUyiQ0Zk97mBPdQj/e2ieQGkwDWRXtQ7gA6aTcILM9O6eO0R+0Ii6+ovFug1pYkPfs6C63VN0DJIPyWDahm1ya4RtsQqlzTELRBMA25niJBu18BRfempXihpUhy0oWWLqkRllbQoGQq/UlNPXRQKPSGLRZdl3lPSUcWSmwJz+pL0KA7TDMWOBwlNgR9sDzLOZVp0segJCTtm3j+6pRoFVc0GrRKbX5R67K7kwavya1kiiBG7d9TxmOhyH5mv5rjleULfzP7Hx7CUrTBCAAA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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