The Pew Charitable Trusts

- The Pew Charitable Trusts -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0f:ed:aa:39:96:f6:3d:40:59:29:e1:e1:0a:0e:67:a0 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

The Pew Charitable Trusts

Company registration number: 3105890
Organization: The Pew Charitable Trusts
Address: 901 E St NW #10
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:ed:aa:39:96:f6:3d:40:59:29:e1:e1:0a:0e:67:a0
Serial Number (int): 21172446864604812814757096950491670432
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:c2:05:cd:ab:9d:b4:f1:7a:81:fb:f3:1d:a6:fc:92:74:e7:e5:bb
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 6c:51:9d:5a:c8:0f:6a:05:8e:52:f6:95:27:4c:f0:95:61:2f:c3:ae
Fingerprint (sha256): 3a:19:5e:84:28:0f:3d:98:31:a9:b2:c1:31:c5:85:ef:cf:fe:88:de:80:a3:7c:6e:37:e7:84:cf:fd:c8:0e:59

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate The Pew Charitable Trusts

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for The Pew Charitable Trusts

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pewtrusts.org

Certificate

The complete raw certificate details for The Pew Charitable Trusts in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMs98PCpFi/w8vB0Vg2r
MgUJ9vOPh2foKwIkzNmgzsWqGx9ashrk3wfccVHA8W85yvr7DJJHS/GyTg8QYAiK
ixhRtuD4yxkCRdaLPpGBN2kR3fidVC9f80ZuF0kf9kbnhr9+GEOThZDS6PAt6xP1
rsC6ItwD3id/mpI+2N1+igITaPoPZdb/YXzpawxF4XUb6CCfRN1ecQivTzqYcqQa
tgmwzYOcNqn5pSeVqGW5wlr78WUyPjr4ln3XGwca/BRzSYnYi6795Y1530jAtUqc
b17jTcrElaoKu1LKqi+v7ewNYDLbVPBjwdQmPoRKgSmNvUGooclU4Fok+IT7/sVU
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21172446864604812814757096950491670432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3105890'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '901 E St NW #10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Pew Charitable Trusts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Pew Charitable Trusts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5872139'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22318164018708030223184467144190544653703699368626167699804169258122401500644761066653125360500391205896109469858828837111165308083281674243092280662547011985694686268283906087962001776759838505836128679611154368569913257724201205360506514768849978007170392501785175196101287381814955769759824154867410780321391128347838833914093992323624743206669236203055746041322621567575468433424915114896548810313198259860969580816583933416699887474849245941083234758347863668546314452085467486630969533170441528498665757907900888301047836736825674661379034619268615752677531352326668667037725702475434289833925812496873176781917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83c205cdab9db4f17a81fbf31da6fc9274e7e5bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewtrusts.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															97f9a6cf15afb9120e5782922bbad2923cd66aed
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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