mBank S.A.

- mBank S.A. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0b:88:9a:2c:44:9a:b3:50:33:ee:40:66:77:e9:80:a9 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

mBank S.A.

Company registration number: 0000025237
Organization: mBank S.A.
Address: 18 Ul. Prosta
State / Province: mazowieckie
Locality: Warszawa
Country: PL

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:88:9a:2c:44:9a:b3:50:33:ee:40:66:77:e9:80:a9
Serial Number (int): 15330787324744926171452243435170922665
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 29:71:aa:e9:c6:b1:52:79:db:d6:7f:b0:d5:14:b3:2d:c2:85:f2:15
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 2a:8c:b8:25:7d:b8:dc:df:bc:4c:8e:d3:7c:a3:ca:c9:1f:2d:ea:9d
Fingerprint (sha256): 38:fe:97:51:bb:17:0d:30:63:1f:40:7d:e2:67:cd:2d:e5:07:83:7a:2d:c3:58:37:66:79:81:4c:92:4e:58:bc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate mBank S.A.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mBank S.A.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mbank.pl

Other certificates including the domain name mBank S.A

(limited to 100 certificates)

Certificate

The complete raw certificate details for mBank S.A. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK5jCCCM6gAwIBAgIQC4iaLESas1Az7kBmd+mAqTANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjIwNzEzMDAwMDAwWhcNMjMwNzEzMjM1OTU5WjCCARExEzARBgsrBgEEAYI3
PAIBAxMCUEwxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYDVQQF
EwowMDAwMDI1MjM3MQswCQYDVQQGEwJQTDEUMBIGA1UECBMLbWF6b3dpZWNraWUx
ETAPBgNVBAcTCFdhcnN6YXdhMRYwFAYDVQQJEw0xOCBVbC4gUHJvc3RhMRMwEQYD
VQQKEwptQmFuayBTLkEuMRMwEQYDVQQDEwptQmFuayBTLkEuMR8wHQYKKwYBBAGD
nl8BDRMPUmVnaXN0ZXJlZCBNYXJrMRIwEAYKKwYBBAGDnl8BAxMCRU0xGTAXBgor
BgEEAYOeXwEEEwkwMTE4NzQ0NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGKF2bVP8st5wTbROWEacRo/u7gPvEX9KgBV1rvs4mhQ5dY0rzP5xW8tE1
mgKzZWBM4891lf33dv0eJl6fNeeGQd8SEYsLrIu1u4T6ewqWgu0ngOFj5gxpQ4Zk
tfTDt64m2CzE+FBsVNTJLXAWkFWBICPx9cIyTRbiBsD0C/3hP0O77qk/x00IS+hb
VHx+8C+52HntBM0UNG6WKiM9V2tg+nPRpwOCa00hyNmUAsUCycDao92Q49HOSP7V
09x6NpvmT7/ef8XCnr+TpKK7BEsdIxVwiR+YvqszzgSn/lFLjzL7+f3b6l+ayoxC
IxCnwGbYEsuZLhwUKUVjVh3AOX8HAgMBAAGjggXoMIIF5DAfBgNVHSMEGDAWgBS+
n72NV22Vta1jw5dOq6iEXToH9TAdBgNVHQ4EFgQUKXGq6caxUnnb1n+w1RSzLcKF
8hUwEwYDVR0RBAwwCoIIbWJhbmsucGwwEwYDVR0lBAwwCgYIKwYBBQUHAx8wgaUG
A1UdHwSBnTCBmjBLoEmgR4ZFaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lD
ZXJ0VmVyaWZpZWRNYXJrUlNBNDA5NlNIQTI1NjIwMjFDQTEuY3JsMEugSaBHhkVo
dHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJpZmllZE1hcmtSU0E0
MDk2U0hBMjU2MjAyMUNBMS5jcmwwUAYDVR0gBEkwRzA3BgpghkgBhv1sAAIFMCkw
JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAMBgorBgEE
AYOeXwEBMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIaHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VmVyaWZpZWRNYXJrUlNBNDA5NlNIQTI1
NjIwMjFDQTEuY3J0MAwGA1UdEwEB/wQCMAAwggN8BggrBgEFBQcBDASCA24wggNq
ooIDZqCCA2IwggNeMIIDWjCCA1YWDWltYWdlL3N2Zyt4bWwwIzAhMAkGBSsOAwIa
BQAEFA2t+CpLIEii0aoby9wHmsiWF2I/MIIDHhaCAxpkYXRhOmltYWdlL3N2Zyt4
bWw7YmFzZTY0LEg0c0lBQUFBQUFBQUNvV1QyMjdiTUF5R3I1dW40TFNyQVJhdGsw
K0JuYUxaa3E3QUJoUVkwTnNoVFZUYnFHc0h0dU9rZmZwUnlaQWVVQ1MrRUdSUy9Q
aVRvdExMM1ZNRmcyMjdzcWt6SmxFd3NQV3lXWlYxbnJGTi84QmpkamtacFY4NGgy
dGIyM2JSTiswWXJsYk52WVdicXRwMC9kNEVLa1NOMG9NL2Q5Y3cyNjJidG9mYmFw
UHpteHB3Yjd3NzVCaERpRUxBZEZOV0t4RGZBRGduZkRma2IwVW9CdmVMenQ2MnpV
TloyWXoxWmYzTTF4MkRjcFd4WDR0bjIvNlZiSFFCcEwzdU1sYjAvWHJzKzl2dEZy
Y2FtemIzbFJEQ0p5ZzdIQm52cXJKKy9PeWdUSkxFMzNzWkRLWGRUcHRkeGdRSTBF
R0UwV0g5bjJuY3JSZExFck51YldmYndiSUoyZE8rN0NzN2Vab3U2c2ZVUC95TTBw
eGNhV3VYUFJCTkpnSmpCcy9FWlVEMVZCbjdldlZEenBWbXNDMVhmWkd4T01DRVFX
SEx2T2d6NXBMR3pIL0xJRVQ0QVRFUDQwak9qd2dwaEd2YkNZYUtRcXJsUFVRa1lU
aVZSMGlDd1VtRStCQStpK1JNQmE5bFNKU25KY1NoRS9sZXdqd1I1cFVSeVRNYXFB
cjlBYUZDcGVUc3RSWEduZmdFc1Y3MHhiRjkrNDhCRGRSdkZVaFBDb05teVpXaUlS
YmMwQXg2Q1E4VUpwNGlzeFJvdUF4UmNrVTByZ3czTVdydVhFcGlTQkU2d2RpTE1l
S0J3SUJpTUs2NFF1V0E0VTlEblI5ZFhBeGFZVlFReGd4U21zS1FhK0NSeG1ncE9M
MGY1VWxOYVhSTUFPMWkzVzRwYVFJOTRibThKTkxwY1R0dE1CcWlDSU56bEdDL28r
UU9wTTZEWXZOZFM3cEhUMUlOb1VjM2RtaU5kMnpTaTJ0bTZ1ZHVvU2MyR2YwREpq
Q1RyVVFFQUFBPTCBiQYKKwYBBAHWeQIEAgR7BHkAdwB1AFVZU64wlgCAbNLrUgim
yZ6TGCisEFa0QhxVNhVMX3WsAAABgfasGssAAAQDAEYwRAIgWNJgd/77oh342pa8
EwP0QsydV2MbPVSJ0CRN7Ffnu/QCIEiUmQOmtg4Tbn/CG0sM1IPwaiwaxQrbRS76
VZzM8RVyMA0GCSqGSIb3DQEBCwUAA4ICAQA0liHNWVI0oJr76b+/n66TfQE5G1vP
euKHs7eM3hfPpA06UHonvwnLc/ITNIVIjznPIUwmyNqB7L0ulIpn7C+7ArBiZqWW
Mb9STuilQ/PRFOnvK+zRWcyU1AE34zBgPS718E6h3RnOcRo6E139ct4UGyBU/j/d
+M2BWwIzOzAV8dDhs+rPpkANWRXzj+zhaUMYN5/p/+XFlWsTF9JL/e9wyUVI3md1
0jabYsGJ3s4x7QrhZURN1oLqBpn/uMCJeTmDD6lfBcHR7xZrWnxlIZ61+XvGbPAv
ISF/eWKIV8rdF/aWhZJFVEnREhOQ+rS8gxaN1T0Y021XeHqFT5/98excDZ4no5is
I41AkfFkgw2sG0osoBlRhvUna+Kx60pcwNYZbQiMUhoCSh9xq9W9bLEPIbyq5h0Z
qtthJP3T4kMaQWaMgmtR7C7JOeIrxYi5tckwKOYAz4bfAvCd24SMAkJHHhvbAcOM
vSggO13c3dctJoP3x/rYJysD6Dqp5dvYdgNB0Ky33Z1VtNDvKVXl5qFILODfh9JC
c6UGrbBtEI1nqnIyuoJw8+nkMOR2RDasEBdRMwcLuJZURoNz0ort6orHhzdmqdd/
MAmbbouokST2yIqpHiP0Th77wU1hdPZXv7wzrbJbDxE6stgF7K/0YDuorZl2O0Tc
FXGCnESxCcqFNw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxihdm1T/LLecE20TlhGn
EaP7u4D7xF/SoAVda77OJoUOXWNK8z+cVvLRNZoCs2VgTOPPdZX993b9HiZenzXn
hkHfEhGLC6yLtbuE+nsKloLtJ4DhY+YMaUOGZLX0w7euJtgsxPhQbFTUyS1wFpBV
gSAj8fXCMk0W4gbA9Av94T9Du+6pP8dNCEvoW1R8fvAvudh57QTNFDRuliojPVdr
YPpz0acDgmtNIcjZlALFAsnA2qPdkOPRzkj+1dPcejab5k+/3n/Fwp6/k6SiuwRL
HSMVcIkfmL6rM84Ep/5RS48y+/n92+pfmsqMQiMQp8Bm2BLLmS4cFClFY1YdwDl/
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15330787324744926171452243435170922665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0000025237'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mazowieckie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warszawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '18 Ul. Prosta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mBank S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mBank S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '011874451'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25015089427870175680067691191763386060291201001718845743790720910280643909324084128931522052373173841482961778775386137045783704447441077588312387770224977222123062524211747161863793631438357059491962237640990473835754885135741415367803740389499007639207195694103717944855739072892653617140729698292189385836254728111975953806056795002585978834170634250776269121683503054437691587566641259792417966974220412233351613475996844557725158862167246664015820659422452873019329385308644454380232449078713952408312079199505882876144611023444124632206395282469117861229493430547485304553548010281263924259633593190014625873671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2971aae9c6b15279dbd67fb0d514b32dc285f215
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															0dadf82a4b2048a2d1aa1bcbdc079ac89617623f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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