mBank S.A.

- mBank S.A. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 07:a6:25:b2:f1:72:ee:96:6f:a9:6b:4a:12:e2:df:61 was issued on by DigiCert, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

mBank S.A.

Company registration number: 0000025237
Organization: mBank S.A.
Address: Ul. 18 Prosta
State / Province: mazowieckie
Locality: Warszawa
Country: PL

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:a6:25:b2:f1:72:ee:96:6f:a9:6b:4a:12:e2:df:61
Serial Number (int): 10167281875504286756181333007478742881
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ea:9f:b5:cc:49:ad:3a:70:4c:92:fc:2e:e2:f0:bc:91:e6:d4:0f:fb
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 0e:ba:b0:99:5a:e9:df:f4:b7:aa:57:41:54:b8:7e:45:25:f2:76:27
Fingerprint (sha256): 34:be:47:ae:60:fc:11:98:33:e3:0f:ee:a0:15:a5:d2:51:98:0c:7f:e3:2f:14:b7:37:f1:e2:59:54:ec:5c:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate mBank S.A.

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mBank S.A.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mbank.pl
mbank.cz
mbank.sk

Other certificates including the domain name mBank S.A

(limited to 100 certificates)

Certificate

The complete raw certificate details for mBank S.A. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKgzCCCGugAwIBAgIQB6YlsvFy7pZvqWtKEuLfYTANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjQwMjA1MDAwMDAwWhcNMjUwMjA2MjM1OTU5WjCCARExEzARBgsrBgEEAYI3
PAIBAxMCUEwxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYDVQQF
EwowMDAwMDI1MjM3MQswCQYDVQQGEwJQTDEUMBIGA1UECBMLbWF6b3dpZWNraWUx
ETAPBgNVBAcTCFdhcnN6YXdhMRYwFAYDVQQJEw1VbC4gMTggUHJvc3RhMRMwEQYD
VQQKEwptQmFuayBTLkEuMRMwEQYDVQQDEwptQmFuayBTLkEuMR8wHQYKKwYBBAGD
nl8BDRMPUmVnaXN0ZXJlZCBNYXJrMRIwEAYKKwYBBAGDnl8BAxMCRU0xGTAXBgor
BgEEAYOeXwEEEwkwMTE4NzQ0NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+43NOMi7VGbDkN7NsTj/4wsELaNEcg6hQnlhR5jPig31sPLEyhdirNZXs
WeKNvtqOhN9mjXxx+TI0FUGQG8n3rACd6CAYoZ6z1GcsGX4MHtpzZFiiYgepVN6Z
S70QsNCrdyHnuFJvCcv8ZXtln8ouAo4r72uV7VJnRCpnvclnnng7ZIT+uN+/5Kky
L0yAnNxxWJJfV9SdTjUC3AJUtLeSorc6CBS5k1P7/TxDmcLY7X2gzeWj6Hy8s31d
v2ZgHwwty/zwKJ2zVkCgNyFIWkTbit2hRewJYaJsz2fjNrZgkGVhUXM0mhpEeRYS
0wtc7FgyomIRrOHjrQyrBpHfqnEtAgMBAAGjggWFMIIFgTAfBgNVHSMEGDAWgBS+
n72NV22Vta1jw5dOq6iEXToH9TAdBgNVHQ4EFgQU6p+1zEmtOnBMkvwu4vC8kebU
D/swJwYDVR0RBCAwHoIIbWJhbmsucGyCCG1iYW5rLmN6gghtYmFuay5zazBQBgNV
HSAESTBHMDcGCmCGSAGG/WwAAgUwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAwGCisGAQQBg55fAQEwEwYDVR0lBAwwCgYIKwYBBQUH
Ax8wgaUGA1UdHwSBnTCBmjBLoEmgR4ZFaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0VmVyaWZpZWRNYXJrUlNBNDA5NlNIQTI1NjIwMjFDQTEuY3JsMEug
SaBHhkVodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJpZmllZE1h
cmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJp
ZmllZE1hcmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcnQwDAYDVR0TAQH/BAIwADCC
A3wGCCsGAQUFBwEMBIIDbjCCA2qiggNmoIIDYjCCA14wggNaMIIDVhYNaW1hZ2Uv
c3ZnK3htbDAjMCEwCQYFKw4DAhoFAAQUDa34KksgSKLRqhvL3AeayJYXYj8wggMe
FoIDGmRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRzSUFBQUFBQUFBQ29XVDIy
N2JNQXlHcjV1bjRMU3JBUmF0azArQm5hTFprcTdBQmhRWTBOc2hUVlRicUdzSHR1
T2tmZnBSeVpBZVVDUytFR1JTL1BpVG90TEwzVk1GZzIyN3Nxa3pKbEV3c1BXeVda
VjFuckZOLzhCamRqa1pwVjg0aDJ0YjIzYlJOKzBZcmxiTnZZV2JxdHAwL2Q0RUtr
U04wb00vZDljdzI2MmJ0b2ZiYXBQem14cHdiN3c3NUJoRGlFTEFkRk5XS3hEZkFE
Z25mRGZrYjBVb0J2ZUx6dDYyelVOWjJZejFaZjNNMXgyRGNwV3hYNHRuMi82VmJI
UUJwTDN1TWxiMC9YcnMrOXZ0RnJjYW16YjNsUkRDSnlnN0hCbnZxckorL095Z1RK
TEUzM3NaREtYZFRwdGR4Z1FJMEVHRTBXSDluMm5jclJkTEVyTnViV2Zid2JJSjJk
Tys3Q3M3ZVpvdTZzZlVQL3lNMHB4Y2FXdVhQUkJOSmdKakJzL0VaVUQxVkJuN2V2
VkR6cFZtc0MxWGZaR3hPTUNFUVdITHZPZ3o1cExHekgvTElFVDRBVEVQNDBqT2p3
Z3BoR3ZiQ1lhS1FxcmxQVVFrWVRpVlIwaUN3VW1FK0JBK2krUk1CYTlsU0pTbkpj
U2hFL2xld2p3UjVwVVJ5VE1hcUFyOUFhRkNwZVRzdFJYR25mZ0VzVjcweGJGOSs0
OEJEZFJ2RlVoUENvTm15WldpSVJiYzBBeDZDUThVSnA0aXN4Um91QXhSY2tVMHJn
dzNNV3J1WEVwaVNCRTZ3ZGlMTWVLQndJQmlNSzY0UXVXQTRVOURuUjlkWEF4YVlW
UVF4Z3hTbXNLUWErQ1J4bWdwT0wwZjVVbE5hWFJNQU8xaTNXNHBhUUk5NGJtOEpO
THBjVHR0TUJxaUNJTnpsR0MvbytRT3BNNkRZdk5kUzdwSFQxSU5vVWMzZG1pTmQy
elNpMnRtNnVkdW9TYzJHZjBESmpDVHJVUUVBQUE9MBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBCwUAA4ICAQBA5YqUxWknxXgBtKVPzKRA04s091zlmLqw
DvRq86M9dfeR6rwYPC3EgwRNrGWG39ZqgHMot2DV1x9nX65S/P+oS6LUAI2HUevX
mtSq9w9frAXky/lrZZhpaEe1VeNlLuHFKv+DjuEjHuIf1njQEo3g+Qyol3aFAoby
ykJK1/IBRkWG8i3XR6bXUseIfMK2t53P/Uzk4PCcuCm+rZNV/f1yQ3x4Bs07ke3F
VQ5DFKnlZcQQN4epQKlLaLS2jGN6FOUJIAzyBClow7UIzE0XRxw5DfNx1CY5I/TY
Mc2dfeUg4C1a91c2Wwywp6Vwu3is52Lh87hYw2HKHQArzbZDO6Bd4FRo1oI9vV9W
jv6tsOjrBy4r7YTg6k14C5uEjJK6W9WCHbaD9S+4Y3Ic6rYmuJoR+KlTodbt+189
mI2x3dWo2exM6REaIXHCnp/SsSG36IKlNvMc4cVD6r1XmsI8SfnMGZouBQnbLARO
pVMLQvLXhti7u6teQQlkd5Bti9DnnRMJYUMVxu0BEV2eMOSW7iYyDErDWOPJqH61
4t+T9esgTItSkxtmrFwdGaHPMXkLCSmt7KFpYnd/3U9h/rOjIx76xAd3BiM47Srn
eIr70SXm39GMqLm6d5+ucuM7lNErNwduLIavd3wBe58KWpceYoJU6pfuZb6RC0Q9
2DE1/1dNTw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuNzTjIu1Rmw5DezbE4/
+MLBC2jRHIOoUJ5YUeYz4oN9bDyxMoXYqzWV7Fnijb7ajoTfZo18cfkyNBVBkBvJ
96wAneggGKGes9RnLBl+DB7ac2RYomIHqVTemUu9ELDQq3ch57hSbwnL/GV7ZZ/K
LgKOK+9rle1SZ0QqZ73JZ554O2SE/rjfv+SpMi9MgJzccViSX1fUnU41AtwCVLS3
kqK3OggUuZNT+/08Q5nC2O19oM3lo+h8vLN9Xb9mYB8MLcv88Cids1ZAoDchSFpE
24rdoUXsCWGibM9n4za2YJBlYVFzNJoaRHkWEtMLXOxYMqJiEazh460MqwaR36px
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10167281875504286756181333007478742881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0000025237'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mazowieckie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warszawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ul. 18 Prosta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mBank S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mBank S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '011874451'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24097437921931826837027861909037072488298732261030625399476758347465170165201249048317515752588110122396757999624351744122817297759380733377342157692090251346447428963131677375541444230471944310668180757602916005994664531177364532652336031386036287463319452690432140741138697418812704253438520425276955521880894584139900978059311154846004913230676675209276151090647032045358864012220907834928706756790818850337652136842452144563068075707809399449984280118927458799600416242536512268310070442788403637652121536150678591177886742069044589944409209776470757840572939437274825783519482235860414542945313282113966304817453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea9fb5cc49ad3a704c92fc2ee2f0bc91e6d40ffb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															0dadf82a4b2048a2d1aa1bcbdc079ac89617623f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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