mBank S.A.

- mBank S.A. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 07:55:16:42:9b:ef:1e:30:45:c9:a0:dc:26:af:38:75 was issued on by DigiCert, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

mBank S.A.

Company registration number: 0000025237
Organization: mBank S.A.
Address: 18 Ul. Prosta
State / Province: mazowieckie
Locality: Warszawa
Country: PL

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:55:16:42:9b:ef:1e:30:45:c9:a0:dc:26:af:38:75
Serial Number (int): 9746392693799130091610660602223999093
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fe:49:89:c2:9c:df:5f:4e:63:03:9d:54:3e:46:92:a1:7f:c2:af:bd
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 80:4f:74:c5:07:87:51:a9:09:be:03:d7:1f:1a:31:05:04:74:2b:4c
Fingerprint (sha256): 5c:6f:33:fd:68:92:be:6a:5b:7b:70:95:1a:ed:d6:dc:7a:06:42:04:2c:8f:50:a4:52:af:98:c2:5e:8e:c2:4d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate mBank S.A.

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mBank S.A.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mbank.pl
mbank.cz
mbank.sk

Other certificates including the domain name mBank S.A

(limited to 100 certificates)

Certificate

The complete raw certificate details for mBank S.A. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKgzCCCGugAwIBAgIQB1UWQpvvHjBFyaDcJq84dTANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjMwMjA2MDAwMDAwWhcNMjQwMjA2MjM1OTU5WjCCARExEzARBgsrBgEEAYI3
PAIBAxMCUEwxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYDVQQF
EwowMDAwMDI1MjM3MQswCQYDVQQGEwJQTDEUMBIGA1UECBMLbWF6b3dpZWNraWUx
ETAPBgNVBAcTCFdhcnN6YXdhMRYwFAYDVQQJEw0xOCBVbC4gUHJvc3RhMRMwEQYD
VQQKEwptQmFuayBTLkEuMRMwEQYDVQQDEwptQmFuayBTLkEuMR8wHQYKKwYBBAGD
nl8BDRMPUmVnaXN0ZXJlZCBNYXJrMRIwEAYKKwYBBAGDnl8BAxMCRU0xGTAXBgor
BgEEAYOeXwEEEwkwMTE4NzQ0NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3tNNtrg8rLp75gOimh9Kioe2hf3Uyyf20lggc9S/r1jBTJ38ymUluSYj7
o6hQuDlGjy4NUEX1cs34JD6Vh9aSbP28m8HR1hju8K3HufXh75HtjQrPGCtrmhrv
31KKc+DMNXdSAQH18qKTQIX6ryOUTQeYKfLg3sjUk4AC26mMOaH0j8dzxjyEH5Uq
CZevaoDo6ogbu7Zm+Qi6RKdd5HQpjE7lDBHI9/ylraF1goBfB7ojb2yoLS40yIaI
8dCM30f+fcjEcR21cVl2oA9iY+v58RYYkOUCFipeDtl8Mgz7MZ+JxMW0j3Tsd5Bf
kq36FK9kZbcT6FdJRKNjh3c3RRwxAgMBAAGjggWFMIIFgTAfBgNVHSMEGDAWgBS+
n72NV22Vta1jw5dOq6iEXToH9TAdBgNVHQ4EFgQU/kmJwpzfX05jA51UPkaSoX/C
r70wJwYDVR0RBCAwHoIIbWJhbmsucGyCCG1iYW5rLmN6gghtYmFuay5zazATBgNV
HSUEDDAKBggrBgEFBQcDHzCBpQYDVR0fBIGdMIGaMEugSaBHhkVodHRwOi8vY3Js
My5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJpZmllZE1hcmtSU0E0MDk2U0hBMjU2
MjAyMUNBMS5jcmwwS6BJoEeGRWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp
Q2VydFZlcmlmaWVkTWFya1JTQTQwOTZTSEEyNTYyMDIxQ0ExLmNybDBQBgNVHSAE
STBHMDcGCmCGSAGG/WwAAgUwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMAwGCisGAQQBg55fAQEwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJp
ZmllZE1hcmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcnQwDAYDVR0TAQH/BAIwADCC
A3wGCCsGAQUFBwEMBIIDbjCCA2qiggNmoIIDYjCCA14wggNaMIIDVhYNaW1hZ2Uv
c3ZnK3htbDAjMCEwCQYFKw4DAhoFAAQUDa34KksgSKLRqhvL3AeayJYXYj8wggMe
FoIDGmRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRzSUFBQUFBQUFBQ29XVDIy
N2JNQXlHcjV1bjRMU3JBUmF0azArQm5hTFprcTdBQmhRWTBOc2hUVlRicUdzSHR1
T2tmZnBSeVpBZVVDUytFR1JTL1BpVG90TEwzVk1GZzIyN3Nxa3pKbEV3c1BXeVda
VjFuckZOLzhCamRqa1pwVjg0aDJ0YjIzYlJOKzBZcmxiTnZZV2JxdHAwL2Q0RUtr
U04wb00vZDljdzI2MmJ0b2ZiYXBQem14cHdiN3c3NUJoRGlFTEFkRk5XS3hEZkFE
Z25mRGZrYjBVb0J2ZUx6dDYyelVOWjJZejFaZjNNMXgyRGNwV3hYNHRuMi82VmJI
UUJwTDN1TWxiMC9YcnMrOXZ0RnJjYW16YjNsUkRDSnlnN0hCbnZxckorL095Z1RK
TEUzM3NaREtYZFRwdGR4Z1FJMEVHRTBXSDluMm5jclJkTEVyTnViV2Zid2JJSjJk
Tys3Q3M3ZVpvdTZzZlVQL3lNMHB4Y2FXdVhQUkJOSmdKakJzL0VaVUQxVkJuN2V2
VkR6cFZtc0MxWGZaR3hPTUNFUVdITHZPZ3o1cExHekgvTElFVDRBVEVQNDBqT2p3
Z3BoR3ZiQ1lhS1FxcmxQVVFrWVRpVlIwaUN3VW1FK0JBK2krUk1CYTlsU0pTbkpj
U2hFL2xld2p3UjVwVVJ5VE1hcUFyOUFhRkNwZVRzdFJYR25mZ0VzVjcweGJGOSs0
OEJEZFJ2RlVoUENvTm15WldpSVJiYzBBeDZDUThVSnA0aXN4Um91QXhSY2tVMHJn
dzNNV3J1WEVwaVNCRTZ3ZGlMTWVLQndJQmlNSzY0UXVXQTRVOURuUjlkWEF4YVlW
UVF4Z3hTbXNLUWErQ1J4bWdwT0wwZjVVbE5hWFJNQU8xaTNXNHBhUUk5NGJtOEpO
THBjVHR0TUJxaUNJTnpsR0MvbytRT3BNNkRZdk5kUzdwSFQxSU5vVWMzZG1pTmQy
elNpMnRtNnVkdW9TYzJHZjBESmpDVHJVUUVBQUE9MBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBCwUAA4ICAQCjMFL83hP+jOeRGUXdoSsa9OxHAFHMe3aQ
cMmfJyY4nSMVZ+HR6ykwRqQIbxyOTPsr2g21u2Xwj6b4YiPdC9o6TDfepIGw+Zv5
DOP2lrvuIedtinFFeBg4lAc55oKmdWaOFlTvLCwnLUJT3UTGk9gpA4J/YrtlN/pL
tK7bczbu+3eRfu5pBmwpw4rr1lH2pm1uihCP2MckrHu0x8qQM+a/OhG0k4yRN7sV
u9mDL5uUtK7elc+4M28JFGyrbNyBuDECkJQeQCzO1dyq9sZQaVek2kmf6cLK7jjh
k+okOzvBitN05lxMM3GqBvd4d71328ac5wx0VhNvtV4LtIOgDLnBfeAR8+3TlHdf
vOVyFB9KPk6Bai10jNEC6PzOruSj6CMKRZ9TCbNDHBAc8Dxu6HMS08Pllw9soQOy
1wyVEKzyAQFLtISe5/atPCidWnzxBMj+IWzLmfWtAm13G9KgPX3ixlmlBL/TRP7U
Dthq0etGZua8Zw+4x8o2J9a1KiSHt6qNX5/TL5oPfrl49QG/ROHGZ4VYL7agr4OJ
yOOrp/A6wRoPQnyi4dCRkhXb7nEQPpW+gvVd7Dpmf5DoqQz7u3rl35sJSbrYFNmE
x/TdNYj8RgjmQWAsWMBqLdWwN7UcnvJZOniSlDV5xOAXNcqmZk2xWnGuvdjMdmxE
bTIoaJmzDg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7TTba4PKy6e+YDopofS
oqHtoX91Msn9tJYIHPUv69YwUyd/MplJbkmI+6OoULg5Ro8uDVBF9XLN+CQ+lYfW
kmz9vJvB0dYY7vCtx7n14e+R7Y0Kzxgra5oa799SinPgzDV3UgEB9fKik0CF+q8j
lE0HmCny4N7I1JOAAtupjDmh9I/Hc8Y8hB+VKgmXr2qA6OqIG7u2ZvkIukSnXeR0
KYxO5QwRyPf8pa2hdYKAXwe6I29sqC0uNMiGiPHQjN9H/n3IxHEdtXFZdqAPYmPr
+fEWGJDlAhYqXg7ZfDIM+zGficTFtI907HeQX5Kt+hSvZGW3E+hXSUSjY4d3N0Uc
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9746392693799130091610660602223999093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0000025237'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mazowieckie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warszawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '18 Ul. Prosta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mBank S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mBank S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '011874451'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23190778379656154009468523552621069681051026871576988826443921316290293690515748108566372800560725895248116274077683540144388609965101199303706896060423595761686746289845637654465986815911514080061707796986816591520836279970403732333873682065063829567269744111868177924697872415640321351701394809066205959038624770921073468723019941192404391834431362934535116633079299028726095472113649092472481307153294941077731980600661655819099139891365181165014356984879115659401518175191363632774430715357827479725965558664036026955915463110557143277347236549521761325165853611990395767787026848025405129056209507599754023214129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe4989c29cdf5f4e63039d543e4692a17fc2afbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															0dadf82a4b2048a2d1aa1bcbdc079ac89617623f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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