www.yvesrocher.pt

- YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A. -

Issued by MULTICERT SSL Certification Authority 001

About this certificate

This digital certificate with serial number 32:9b:e2:66:a3:84:31:e0:61:97:55:ab:3e:c8:fa:fe was issued on by MULTICERT - Serviços de Certificação Electrónica S.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A.

Organization: YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A.
Organization unit: Certificado SSL/TLS
Locality: Maia
Country: PT

MULTICERT - Serviços de Certificação Electrónica S.A.

Organization: MULTICERT - Serviços de Certificação Electrónica S.A.
Organization unit: Certification Authority
Country: PT

This certificate has expire since

Certificate Details

Serial Number (hex): 32:9b:e2:66:a3:84:31:e0:61:97:55:ab:3e:c8:fa:fe
Serial Number (int): 67270797758767564004219720479218924286
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: fc:7a:50:56:53:b7:4e:f0:3b:f9:a2:9b:19:7a:0f:3b:95:5d:e7:38
AuthorityKeyId: b0:02:39:52:0a:4f:73:9a:c8:d9:81:45:36:5d:11:9d:5f:23:39:97

Fingerprint (sha1): 4b:7b:0f:7d:48:7d:7b:3a:4d:a7:d9:c8:75:00:33:af:91:bb:99:e5
Fingerprint (sha256): 31:3a:fa:c1:9f:44:2a:a0:ac:45:25:2d:9c:1e:2e:99:c4:66:bc:5a:8c:44:bb:a5:4e:2c:c5:10:5b:9c:42:47

Issuing Certificate URL: http://pki.multicert.com/cert/SSL_CA01.cer

Revocation information

OCSP Server: http://ocsp.multicert.com/ocsp
CRL Distribution Point: http://pki.multicert.com/crl/crl_ssl001.crl

Check the revocation status for certificate www.yvesrocher.pt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yvesrocher.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yvesrocher.pt

Other certificates including the domain name yvesrocher.pt

(limited to 100 certificates)
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
newsletter.yvesrocher.pt
ssl3.ipaper.io
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
www.yvesrocher.pt
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io

Certificate

The complete raw certificate details for www.yvesrocher.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RpVeajWrz2LHUh1Agmj
OaRtg0OzfZRt9ZVVSO+cULKAE0qtBlNZKFxPRbZgtIDlAi79lxtBAcpHYKmYHKPj
xZvxglPUADym3apRPYu527GDI+yki9N/pYqQegwzPefAydu7j6sWGLmQdZdD/QvL
Mv2oZezWYLmUS5XtNZ1tZiAG6iTSuVTDWGtY6Po8egxA1bPbzOaq/6FEgj9n6cJP
nvzo64/YNEUYdQ+4vokdYvZ7cv2i3ywzLGqVz4y3klsghg+uCqWINL0Cp36ESgE/
/qTXTikMLERfXw2vBWmDuGMjMGWH9oDqVO1mfb6ATAMDgRZcd+UG3gnYc97vTY0b
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 67270797758767564004219720479218924286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT - Serviços de Certificação Electrónica S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT SSL Certification Authority 001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 17:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado SSL/TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.yvesrocher.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30941370440657817333440698664291133741847987048539333363799862495930204748542162604025801825893502832640532063655584213616030505006299548245925992240954487178439007451585002755173289273475066831198528006081854683644487480184756418595229795243690250039397463506853444161778445568737675323362090955260459594407423731507235979522526479273503913984773746379371396088396187313678782915583344232462318529624237264985708974717878935758485293581147779112965260178326492242092207350647150668393407458837795863013746510763752023725584764536717229495224131669054755902085267084886473410487008759007661055874622342505045374606319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b00239520a4f739ac8d98145365d119d5f233997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/cert/SSL_CA01.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.multicert.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.46 (freshestCRL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001_delta.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.1.17
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.0.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.multicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc7a505653b74ef03bf9a29b197a0f3b955de738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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