DV SSL/TLS Certificate for *.cupregionale.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.cupregionale.it DV SSL/TLS Certificate

This certificate with serial number 51:0b:df:0f:9f:2f:f2:f5:fd:d2:06:8c:da:69:8f:ef for *.cupregionale.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.cupregionale.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 51:0b:df:0f:9f:2f:f2:f5:fd:d2:06:8c:da:69:8f:ef
Serial Number (int): 107729107139052204271138405732693151727
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 6d:04:dc:ba:9e:4a:a6:d0:b1:63:bf:af:fa:ce:34:24:c0:15:8e:18
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 3d:03:11:b0:42:a9:8e:f9:6c:d1:68:40:f8:06:2a:23:60:ae:57:f8
Fingerprint (SHA-256): 8e:41:9f:02:f1:0c:0c:82:5d:6c:be:a4:94:07:f6:8e:20:6a:1a:17:3f:93:ac:ea:d2:9d:de:f3:c9:10:0a:90

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.cupregionale.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.cupregionale.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.cupregionale.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHezCCBWOgAwIBAgIQUQvfD58v8vX90gaM2mmP7zANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yNTAyMTQw
NDAxNTRaFw0yNjAzMTcwNDAxNTNaMBwxGjAYBgNVBAMMESouY3VwcmVnaW9uYWxl
Lml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQZONd0oAp8ZK2iH
NzEb9LRKAoTl55eMfXUPjdufnQfOntUvTfWFExpNl1qHYHxUjR8AgjUx85MVErhr
CmagryVL8CYjM7hvKo5vj/atpQu1387zzRDLVonHZ867stlMlEOcEkEzovcXX07/
62WRmwoOLertVekRhfwh9sg5G0AYsGnsddVnvaZAoc41TEbv/ZBVNkwlRTH55Aq+
Wd3ZOvgynucOzCsV/vPUtpU0xX7b2Dat8TUHNXPNgq9S6PE74hPfzFAM8eq0xP+k
ciN+rO8855ptx8vNY5NRo9drU6bhAwYPZlC7Uqu5pYXTuB+Oz2EtMWN47qH9Rr4h
GNm7RwIDAQABo4IDTjCCA0owDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBRCg22A
fAmEZ/2AV6vxJvV3yCKCcTB9BggrBgEFBQcBAQRxMG8wOgYIKwYBBQUHMAKGLmh0
dHA6Ly9jYWNlcnQuYWN0YWxpcy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGR2ZzMwMQYI
KwYBBQUHMAGGJWh0dHA6Ly9vY3NwMDYuYWN0YWxpcy5pdC9WQS9BVVRIRFYtRzMw
LQYDVR0RBCYwJIIPY3VwcmVnaW9uYWxlLml0ghEqLmN1cHJlZ2lvbmFsZS5pdDBR
BgNVHSAESjBIMDwGBiuBHwEXATAyMDAGCCsGAQUFBwIBFiRodHRwczovL3d3dy5h
Y3RhbGlzLml0L2FyZWEtZG93bmxvYWQwCAYGZ4EMAQIBMB0GA1UdJQQWMBQGCCsG
AQUFBwMCBggrBgEFBQcDATBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsMDYu
YWN0YWxpcy5pdC9SZXBvc2l0b3J5L0FVVEhEVi1HMy9nZXRMYXN0Q1JMMB0GA1Ud
DgQWBBRtBNy6nkqm0LFjv6/6zjQkwBWOGDAOBgNVHQ8BAf8EBAMCBaAwggF+Bgor
BgEEAdZ5AgQCBIIBbgSCAWoBaAB3AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5G
pD8PyqnGAAABlQKn70QAAAQDAEgwRgIhAMU2egtePDArfwIpG4LSxOzBPsxQYR94
ozohIQNSh1xaAiEAh5QOAMaA9L0vEAqE5plig0uiye3fmd7ZYBkJ3setuWsAdgBJ
nJtp3h187Pw23s2HZKa4W68Kh4AZ0VVS++nrKd34wwAAAZUCp+9zAAAEAwBHMEUC
IQDgP3m6Z8f0j0oh4KPfm2JRyEy9FIean1E2Q3jncmicyQIgb1Gup76YhWhkLZ/s
QL1kamAo06l5iTcaEB9ze3g127kAdQAZhtTHKKpv/roDb3gqTQGRqs4tcjEPrs5d
cEEtJUzH1AAAAZUCp+93AAAEAwBGMEQCIBURXMKuXyTcXx4PZxA6Sn4Coja3I0Po
8/RdI+nly/tnAiBVHaL/0qQJ8yumwt3QR5npDrzYP8+Vy6wyk31ADXitFzANBgkq
hkiG9w0BAQsFAAOCAgEAFFuU/9VXZjivP9qYDBwOTswiY8E5uxeOytEvdvdxbBWd
95sx9gLF/AA1KWmA59ewV6srdHtCS7UbyPwZTiys3r33f8LQxVwEziQRWBGjxOCL
DyS2gqIsyZQXpeaEREs+EbMLfh9kSWnoRd8EUtIwlwMrN9rbFMcY4yiTK1eckgkS
CqIRHTmpjN5Y2e7mTw7ZcmtShggZ8OjuF+N00kHoDuwHbGyyi+gfK6Fsw59AQGgV
yqJjroEsSslHa1JB/niDCa7EokX+Lm6mxB8U38WZ6Ssgr9TgsNYJFCSRn5zkZeVI
ScC+hUVNDucU/BMXi3unJd7D72u37iFYVW0RzJfTEAg5gij/FY7Ov39AD0KTMtzo
hs0gwvrJ8El5fS0WDhDD2SIwXzGV1nM2BF37620zsNvl9bmwSRbKr3/h0Z6oQcLv
j7ekr/3qO7PIEm1j4JsgRJvKtv/xH1CxUO1OcAuVsOZrOBeose13820nZlo/1YQd
ynBpBb3fRTLYijIW5zboNcCE6IJRFA3SyFiZ/Wk81D32Wjy6OaGY105b5LNF5euJ
JU3sWZ1BxNYYr5CVODJpkhfzE38kwWqG2MGQpoP9d+CHiNv58UnKg6/C2gDV3Rro
7cf4NituJg5MV9K5IQKyvJGwTHDXUTOdGjffhTBX/VVCSTrhNF1RQs3c35TteKo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQZONd0oAp8ZK2iHNzEb
9LRKAoTl55eMfXUPjdufnQfOntUvTfWFExpNl1qHYHxUjR8AgjUx85MVErhrCmag
ryVL8CYjM7hvKo5vj/atpQu1387zzRDLVonHZ867stlMlEOcEkEzovcXX07/62WR
mwoOLertVekRhfwh9sg5G0AYsGnsddVnvaZAoc41TEbv/ZBVNkwlRTH55Aq+Wd3Z
OvgynucOzCsV/vPUtpU0xX7b2Dat8TUHNXPNgq9S6PE74hPfzFAM8eq0xP+kciN+
rO8855ptx8vNY5NRo9drU6bhAwYPZlC7Uqu5pYXTuB+Oz2EtMWN47qH9Rr4hGNm7
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107729107139052204271138405732693151727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 04:01:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-17 04:01:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cupregionale.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25377008660749349797604282041611163173187034086104515201512170075320283129992368473822102835176496694829361540005951156084574137528085230987759509949151232218809677391766407008593114807797537919281959831649707153273610013348924029683430428901984188209988385558323303300488339567773235602056392263572902006705881079771693886060623840174341709849223219345922240082975077155100318466977982563080080226114946478489550704107238106504628338781397975673612722378500894431849324646229845050294322910982071135596577985815811839352676599277945762035746765666027091655820231634928261918557061352789736926294549644620503895882567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupregionale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cupregionale.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d04dcba9e4aa6d0b163bfafface3424c0158e18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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