CliftonLarsonAllen LLP

- CliftonLarsonAllen LLP -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 01:40:71:8a:70:9a:a7:cb:8d:f5:d2:aa:94:01:b0:2a was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

CliftonLarsonAllen LLP

Company registration number: 9699-LLP
Organization: CliftonLarsonAllen LLP
State / Province: Minnesota
Locality: Minneapolis
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:40:71:8a:70:9a:a7:cb:8d:f5:d2:aa:94:01:b0:2a
Serial Number (int): 1663837875352072514698553316392153130
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 67:b0:e3:24:94:8b:0e:bf:22:24:d2:85:aa:99:c1:10:43:0b:01:1e
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 8d:cd:53:c5:11:ff:bb:39:62:2b:a7:d7:ff:b0:1b:41:a9:cc:2d:19
Fingerprint (sha256): 31:44:dd:c4:84:12:0e:80:e9:c9:c3:50:fc:55:5d:fb:d7:af:7d:d3:79:26:c4:5f:c2:91:2f:e0:3a:fd:ff:43

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate CliftonLarsonAllen LLP

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CliftonLarsonAllen LLP

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

claconnect.com
clamortgageadvisory.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for CliftonLarsonAllen LLP in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIVOGW1be6cS1Otvmkyu
T7AwhKFcm9ka3fnCi20MCHaofZfT+XwtJWtr3o6r1K579lt4H4mLJ3A8W47gnmxM
jd20XWtkmLAC12a84KE5wtN9xdm6YbKhrY4jbV3u2UVQX/J9bsvP168JyB1/lpus
+J1ssquMLjhyiqAMKnU8eVvZHAY5Kk7Xwg3d7xxTVwT8UWwVsCne64q8akHV7yUl
P/clXP4+ddBKdOxVUBL9MkXR4ugM+UpyWKZQWmcCKkta51m5GVvFdqtL0FdenDzW
n/UECEadMBJc3fSiiDk59YMChMBGqviu3hl38iW5KOpsLwXbnDmGDdK9NbUaWBIY
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1663837875352072514698553316392153130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9699-LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minneapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CliftonLarsonAllen LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CliftonLarsonAllen LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '97474322'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23798536516325931683516247704030359865452546916638686768668879591935063610941872493045104115015994319850778813163254861193014632140374397383038811088557549087706291899911823574907030132028989757618204648317412623952326191073805585182386575372101026094435247330135804524821160929948995977903123400199452823223771898009036457562765628914905209591232851348215481362134191592478459942478119634742446213956025406158589275928478262313450967960222226394548562976355613642573181027388079078880165817482406752181795472190232967066462098231583407497257788550914383562949685410947071517050171032849090561864384347799555071416363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67b0e324948b0ebf2224d285aa99c110430b011e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clamortgageadvisory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															008af33c93ced5ea0157952db29913874227109b
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00080778f7e65443fd197c9d1c305465901bb167792684a1e330cca7f9fc5f3095189ed72bb0af728894e0d21eff41921f3ebb57641f06d5b8e703dd46c34cf4b29f42e697e534696ad4139d13d10de70064944ad05a046a1745dcd5638c41a5ea1db73c223b6e470e1088f69994941c5a2ef5f2ace20b6a1227c1d5b0f23be57e6a17b5c045d4cb9fc77aebc63b1dc14c8b9828f98b5fede5997d2455d3c946ba2916c5c73f1b96cd57ad98f3e3ab856b43f9b1d10838c5c96b9a48bae82620b4bc5d09127d72946708ce9e9c787130a420ca2b88e3d691faf96def95b7e27e09a0e1f61941d09848355d696dd10736713810d8790678cef28cb9d27984fe496cc2cdbefabe7f93004892038331a4ce6d387c6baf2c9ae3f7d84df6578471494b0c0544cf6c63c8311509d936d8dcfdb45385b1297eb6f4e6a2a85d3f43f3a6465df165127c8ce604c2599c3990068de9c72a6ffa9d36a1785537996aa188e50845c91f8faf93dbe1eaadad81ba0989242e7355841068f6159f1e7667fe21ddf4e584a6c74aa040abb4337756f277688ff8a900f0101d9650f5b176e5618489cb890a04d5075e57d30a900dfdab242f4af93fe9a9375f1f2b9e05232ac5191f2ef8f1d9197bc8cc64e936876b066bf30f3147b6373fd25a0ccc28b1e972e022b16f4291d99916ef40ad639fb10126519f726991d0618ab5ba869a7935afe75449