qat.integraatiopalvelu.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by DVV Service Certificates - G5R

About this certificate

This digital certificate with serial number 01:8d:88:78:ce:76:30:97:7f:ad:71:47:d6:6b:54 was issued on by Digi- ja vaestotietovirasto CA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Policy Qualifiers other than id-qt-cps MUST NOT be present for certificates issued on or after September 15, 2023 (BRs: 7.1.2.7.9)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
State / Province: Helsinki
Locality: Helsinki
Country: FI

Digi- ja vaestotietovirasto CA

Organization: Digi- ja vaestotietovirasto CA
Organization unit: Palveluvarmenteet
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8d:88:78:ce:76:30:97:7f:ad:71:47:d6:6b:54
Serial Number (int): 8062929030549686115570517712202580
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 00:28:ac:95:39:aa:e9:ef:9f:59:3b:ba:64:b7:39:88:14:7e:4e:21
AuthorityKeyId: e4:90:b0:a8:17:83:a3:9e:9a:d5:fd:3d:c9:59:6b:1f:20:b2:e2:be

Fingerprint (sha1): 7d:eb:ce:63:5d:ae:78:36:0c:56:2d:cb:1a:61:7e:6b:b3:f4:37:04
Fingerprint (sha256): 59:a9:69:43:73:fc:c0:ae:86:5f:e3:ed:a5:02:0c:c7:dd:60:f5:ae:0d:0c:aa:23:89:98:90:cf:53:2d:36:ac

Issuing Certificate URL: http://proxy.fineid.fi/ca/dvvsp5rc.crt

Revocation information

OCSP Server: http://ocsp.fineid.fi/dvvsp5rc
CRL Distribution Point: http://proxy.fineid.fi/crl/dvvsp5rc.crl

Check the revocation status for certificate qat.integraatiopalvelu.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qat.integraatiopalvelu.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qat.integraatiopalvelu.fi
qat.integraatiopalvelu.vyv.fi

Other certificates including the domain name integraatiopalvelu.fi

(limited to 100 certificates)
pr0.integraatiopalvelu.fi
qat.integraatiopalvelu.fi
pr0.integraatiopalvelu.fi
qat.integraatiopalvelu.fi
it1.integraatiopalvelu.fi
pr0.integraatiopalvelu.fi
qat.integraatiopalvelu.fi
qat.integraatiopalvelu.fi
pr0.integraatiopalvelu.fi
pr0.integraatiopalvelu.fi
it1.integraatiopalvelu.fi
it1.integraatiopalvelu.fi
xbrl.integraatiopalvelu.fi
qat.integraatiopalvelu.fi
it1.integraatiopalvelu.fi

Certificate

The complete raw certificate details for qat.integraatiopalvelu.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8062929030549686115570517712202580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Digi- ja vaestotietovirasto CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Palveluvarmenteet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DVV Service Certificates - G5R'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 22:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 21:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'qat.integraatiopalvelu.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 587892649507008812259338829528918358862219159376090678844354935230968334357007225469577432977500146305264525976140645152422681971651493246037643936936223477358372550671978494770603659690144246832343989581965140267085663684352341300366712088207837090597286955301468107541835558022883030287160593110320274731006859150403923181812950220886782059119544779141699526242027329075670569198662952656918973367307073371280341303033095235853335547626112873488601783365459186125590624804056750122146592380350656248683631332671050616957083864263315086047618365813847053779021206289043033619935876546900344012527643968308512657846357205032615392844247921568426308838385553277365137113752884166330403764558782136983389666389407047638563701514290567873621593595648618992075752011520958632847046551791652334826790390583544936346815231596038231849738518812399631554129027121545558984287544182807541648283331054320283741621075573583760481152924420016080157267460359621980739181432692702090198365944306325849186648726049972032803722811078604560143726365286539026296525970706235309549845444544381240926392979984731532718711485406227978347906671259080050712154354632700333368333407247941026350812127375455776884364393831111691795655916821538010255041896153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e490b0a81783a39e9ad5fd3dc9596b1f20b2e2be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0028ac9539aae9ef9f593bba64b73988147e4e21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.246.517.1.10.305.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.fineid.fi/cps54/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [86 97 114 109 101 110 110 101 112 111 108 105 116 105 105 107 107 97 32 111 110 32 115 97 97 116 97 118 105 108 108 97 32 45 32 67 101 114 116 105 102 105 107 97 116 112 111 108 105 99 121 32 102 105 110 110 115 32 45 32 67 101 114 116 105 102 105 99 97 116 101 32 112 111 108 105 99 121 32 105 115 32 97 118 97 105 108 97 98 108 101 32 104 116 116 112 58 47 47 119 119 119 46 102 105 110 101 105 100 46 102 105 47 99 112 115 53 52]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat.integraatiopalvelu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat.integraatiopalvelu.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/crl/dvvsp5rc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/ca/dvvsp5rc.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.fineid.fi/dvvsp5rc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.3 (qcStatements)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.1 (etsiQcsCompliance)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001f42197ad9378989476a3cfbc603102a596cab5a8b4f587aa2cefb4161934a9d4740bcb320bb015e747f4daad4d6f3a434002113b40ac568c4c41728692fe06727cb3d1e781da8b79e8d04f2a8b99b6405830207faafd9c81b4d26ec5228189f80cb35364fcb78f9cf9e79159e7951f575e7fab85350385e2461c3a7459c03081af24bc7c4496fd33e45d68bba6c48d2ec762eedb300356e043dee5b695afc190eff16b534c29ebc6e231e5bef514eadaa677ffce047e9166b26a2d55ccfde1bcc68c35ebaaa483463744e03e2d3d877a7a7cd9046a9893a783298756eb67238df1860330f091e7bddfe47c7129dcee0f9f8fa4eab53ee406eefa703a943eb92e4eeff56ab38361ad15bf2cdb8f8cd21b7320cc15193fc3dd092631ff94741b386fa1386939e877f9863e9fdece66b285c94ff6c6cd468d8b85524ba8b35b3e621e1b50974eeb897c9a9c13ecf699e5936d09426c3e1ebb845326b0475136139f6c5ff4604b7107a4d5d248a97f422737d9ce42b45f4efe29cb2afdcba0c46a948b18bbebb49c4b667b1b6fbd008594864c2d4e11d777ccdd166ea6435c3ad63e85850475ec7bfd41b0c4b12517072abf48a455099bfb057df1ba280af370047a134ac63ff98ab6cbacddcb087707fd720337b1c024651bac11e1170ff06ad8e16f0c96e26d2118f554c8b0eeb3602f283ef58bc2a1aaa95c8f32b351beb023e