Deriv.com Limited

- Deriv.com Limited -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0a:21:07:0b:35:67:47:10:04:eb:2f:ba:48:35:51:5e was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Deriv.com Limited

Company registration number: 71479
Organization: Deriv.com Limited
Address: 2nd Floor, 1 Cornet Street, St Peter Port
Locality: Guernsey
Country: GG

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:21:07:0b:35:67:47:10:04:eb:2f:ba:48:35:51:5e
Serial Number (int): 13463768619085381722854471985781887326
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:8c:7a:31:65:a7:2b:e3:ea:aa:a2:f3:ce:1e:d4:d7:8f:c5:aa:0e
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): f8:69:2f:58:58:b8:31:86:80:28:44:0f:8c:ad:c3:8a:60:b5:42:92
Fingerprint (sha256): 64:41:1d:67:4d:05:82:2d:4b:f4:b3:38:6f:1a:67:bc:4e:ba:64:a1:8a:ab:26:3c:97:66:e9:0e:dd:42:72:fb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Deriv.com Limited

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Deriv.com Limited

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deriv.com

Other certificates including the domain name Deriv.com Limited

(limited to 100 certificates)

Certificate

The complete raw certificate details for Deriv.com Limited in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/dA4zXtmzQf/GthHjqh
N00nxuVJIPyd6n95IjR5rEtA8DTLyRaXW7jtQELciLF298c6tf9gM8IpqXnxGdCr
+iAkxaJsC5yXZmwGCAhaEedHd3p8je0RBjQnKLGs8p41Sim2+/RgjZ4AulDYRxgk
RHFR4C+AnsZQegUtcCT0qm3baaRW8S4zCTVws4cOd5TlfUxNHhcKMIKo8rlDRnPr
0mJFSo9cW29ENCszYa6+Wux7TbNCIxqEnCpmZvaZ6zRVSI6EO93V3ZXj2lEynOAv
ni6QjVYnm+ud85A3wmWCx3Km4gNIeqxvDhW+cVn7klr4Gf+1zHXasE0A+Mx4+H+6
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13463768619085381722854471985781887326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '71479'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Guernsey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2nd Floor, 1 Cornet Street, St Peter Port'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deriv.com Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deriv.com Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018872257'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24233441477290426598293731554423711959838263498455452237429718010845401740198285252490920358281031974262811873765516299311194770471246835794653821682552561468419038683688693208316705552605500871918924579988632231571910416375484529247952641878606014786225239880049637714256257119644134578782769148006098146965172640376645268972492913559005449674488095913582891828305542741586849015809286653248588704555376705753225197485472919748297650772466672793692145971739868890184653628299484053225584026273399870300458852147048256056431001223797814140478408283833837788459137230602662808872102053549168090256235402411770694842897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e28c7a3165a72be3eaaaa2f3ce1ed4d78fc5aa0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deriv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															0bcb82460012c582963dd50c9d46592df3718739
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00326e26c809d0c322cee16e5aef8e72b7f707f5acca368549068fa747be019a628de058609a1ff272d6f7775501ec885802e3308379ed756e7aa4026ce704fe6cf799c209337c1a7ebc228b62d212484fe742a23a1b2f3ac2e275d4bc1e079e81482c3f84ad6b585ba7c4b15ed83bb0c6f36f3e52a0d6556817aeaa6a982483d3498f2fe449e65dca87a67ee07b803f3c18d6be5eac40b64f100531cbf3fe92df9802644d1ee0fbcecf231dc25ef3db7db2f33ea58bd0b0538d05fd7dd6a7815fefcc2c6b6709f281991df7bc10980e28112af47a70d0eb498e771f5fecdc9a9fb145884d603eb6edba97fe8934642f02cc2a001599b68025b7dfec2bacfa0c659dbc07061d8c721e8f385f5152f2eaffb5aeaada2081028f6ff4ee9a75472932e1c40e685fe74ca62505a98ae562bfd83a605acc1235537e05e861590c84dfbbdcdc85aff367205798ddc4d23357050ca6710ab590bd131363d9eafbc33cc6b1530fdebd2235eaab1edb013e3e8c137d34096ca3094278576d75537b982a48f66721bafec7787ce0dffee570994c7dd5d0ee843623e29d4ddc3be535014075c0ce65dcc285bae3cba1181f27032ea4123b6657f6a8501e7dcadf8f2855608e40b82138236326c0b1202a5fcce1953614109e60fe08d4a58cbe43e2dfb13fda75e4d194ed5561eae51cff6947e7cbcdf9c1ebcd71350f7ae757485224fe46888c