www.buddybank.com

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 46:96:11:87:85:f2:4d:40:a7:61:94:66:80:1f:7b:f4 was issued on by Actalis S.p.A..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 46:96:11:87:85:f2:4d:40:a7:61:94:66:80:1f:7b:f4
Serial Number (int): 93825159771943967921086371426511846388
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:e7:80:4d:f8:43:ed:0d:55:1a:76:1e:be:1d:aa:91:88:9d:f4:9d
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): bf:71:2a:0b:3e:a0:c3:bc:b4:c4:94:c6:4a:b0:6a:0c:31:b8:67:87
Fingerprint (sha256): 6c:32:bc:e5:ed:53:76:ad:92:16:a8:9f:00:40:36:80:7c:83:f0:5a:77:b2:27:7d:01:25:c8:3e:6b:cf:93:eb

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate www.buddybank.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buddybank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buddybank.it
www.buddybank.com
www.buddy.unicredit.com
assets.buddybank.com
buddy.unicredit.com
mcataloguebuddy.unicredit.it
securities.unicredit.it
buddyunicredit.it
omf.api.mifid.unicredit.it
buddy.unicredit.it
tk0.api.securities.unicredit.it
api.buddy.unicredit.it
www.buddy.unicredit.it
mifid.unicredit.it
www.buddybank.it
mcatalogbuddy.unicredit.it
www.buddyunicredit.it

Other certificates including the domain name buddybank.com

(limited to 100 certificates)
www.buddyunicredit.it
sipedge.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.buddybank.com
api.buddybank.com
www.buddy-q0.intranet.unicredit.eu
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
sipedge.unicreditgroup.eu
uat.unicredit.eu
www.buddybank.com
liveperson-uat.buddybank.com
uat.unicredit.eu
meetRP.unicreditgroup.eu
www.buddyunicredit.it
SIPextIT.unicreditgroup.eu
www.buddybank.com
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
api.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
uat.unicredit.eu
meetRP.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
www.buddybank.com
liveperson.buddybank.com
www.buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
api-uat.buddybank.com
meetRP.unicreditgroup.eu
api.buddybank.com
sipedge.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
sipedgeit.unicreditgroup.eu
SIPextIT.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
www.buddyunicredit.it
www.buddyunicredit.it
meetRP.unicreditgroup.eu
www.buddybank.com
meetRP.unicreditgroup.eu
www.buddybank.com
www.buddybank.com
www.buddybank.com
*.cloud.buddybank.com
meetRP.unicreditgroup.eu

Certificate

The complete raw certificate details for www.buddybank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2w9MubcVfOmnv7F4Cyv
ZvQtnvvnisDmKluE0b7bCCoS+oL/BCxwkgG3WcrZOReocalKKKqRUmIyDl7wQNU4
1R9IASQVDxgbqq9ig/jbHHNn7TDGmfSB/FzNPrSy7qzmLJoe453K9RF9zQYUJ4fp
Dm6KYDrcUhRm+Vzi6W6fUtfQa053IiZv1/+VscrTZx0wugRz5SJaGzUgf5BHZwSF
97TZSo1RedLW2pibfp1DpoNfzTlnz1RhnGJgtu+vp7ib7tJhtIpzgbFf+lyqkuar
hZzQHwjh+GSgReKTzrFwylvNKQJgw+tQQQVbmzKsnwfjySDy6CA64CPdsk9+B+B5
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93825159771943967921086371426511846388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 08:38:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-07 08:38:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.buddybank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20630218378243760758660185564633005754381567461289034888555005328671020664694642467374664514637994295615371407888977169854740461939971647412227713329652231598926088860141932753274010721347273053948804593214195553391197348451332602908134248437539269900905929401299998404178471341872477464218715798534749024364494615875255169540443937810509687833385370166193841198107115284426670411788481879478272786758030307295823485795417421760022704154615945462623744106891544077228314037206699863409224402299246601492363372917673093340992864379976664982262225600249347380379193921728161526432080378608487041445172022370446474246581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddybank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddy.unicredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.buddybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddy.unicredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcataloguebuddy.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securities.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddyunicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omf.api.mifid.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddy.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk0.api.securities.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buddy.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddy.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mifid.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddybank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcatalogbuddy.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddyunicredit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06e7804df843ed0d551a761ebe1daa91889df49d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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