grandeconcorsodeluxe.it

- Lidl Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 15:69:26:1a:e2:f0:d9:30:b4:a3:4d:ab:cc:97:9b:c4:71:1d:e2:81 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lidl Stiftung & Co. KG

Company registration number: HRA 102314
Organization: Lidl Stiftung & Co. KG
Address: Stiftsbergstr. 1
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 15:69:26:1a:e2:f0:d9:30:b4:a3:4d:ab:cc:97:9b:c4:71:1d:e2:81
Serial Number (int): 122233703849009375707709756080378612333609345665
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: bc:c6:5a:7b:93:1a:6c:85:d0:b2:4c:56:e5:7b:94:b8:06:fd:57:6d
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 7f:6c:97:86:38:9f:18:74:8f:d2:f7:c1:32:eb:31:17:07:f4:d0:45
Fingerprint (sha256): 2e:32:3f:3e:0c:cb:bf:3e:60:a1:e2:53:71:8d:a7:4c:f9:1d:b7:b7:30:7b:1b:8f:2a:ed:49:33:30:9f:35:11

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate grandeconcorsodeluxe.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandeconcorsodeluxe.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grandeconcorsodeluxe.it
www.grandeconcorsodeluxe.it

Other certificates including the domain name grandeconcorsodeluxe.it

(limited to 100 certificates)
www.grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
www.grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it

Certificate

The complete raw certificate details for grandeconcorsodeluxe.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122233703849009375707709756080378612333609345665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 15:49:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 15:49:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102314'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stiftsbergstr. 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandeconcorsodeluxe.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646911553393483089327884166501726720240408190107273575052541875076565486715068663865251322844841475508287599433475122581589729450800473123877137169817481779270064896321612217588858652362863721052348245094394897098069660164370236191712230017774749659151551039144128978066432283640426953789277143389622943087446235514301176722221082959739654287103789231066008081858835005632222780885744905038649981360809317779945552665693571217113015590740568946620134918385416701241558924276419799603302693968854291368427924651892129841353697791275555041272589964839532984463778299683552958085500725736275232342359289055459798870327191011693261276319343521825562253143200098166859081337238999917593181888554569479902097598522083026241736188569143449462618024308398483843406703950565762324673226311748680124216437751244532258349865178341861034841420420307619305922239642362988011623146423149883362734923603675616433068536388774616411429620739618895565529344156377794411427361963598190620252616862563211826289031176203879410568501202376552499797793818896940568333147585169132461321309916284635853102139758403287694160971429172706802021412860466424126544362879147484770399646309295257315410249863730256541134152146471115269403105941411828416672458406179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeconcorsodeluxe.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeconcorsodeluxe.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcc65a7b931a6c85d0b24c56e57b94b806fd576d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001853a863b5f0000040300473045022028e1b4fe04b7a107e9d825b3d501104ecd1ab38786bcb054943b52820d1366db022100fb3591169e2b0945e69b928d590f7dcc9d2f0215a2c13a2656d7529fa6e35e2b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001853a86397f0000040300473045022100b8e1fa7927895b5a99a829f1fa876ff59ef13f62eff2d6b59dca1e74eab6fb2002207eb1a4fd0317cff75f3688853287f3972708af115b5745b79b28e460bb7b8e38007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001853a863aef00000403004730450220504332891591c147a85e7da13a524eb3c349218bf472f30cc9514d8c6e33bff8022100ab99907cbd07ae013abd4f276ab7c50fa523a4c2489c2bd4795ee7acf3270c01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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