Proton AG

- Proton AG -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0e:c1:c6:99:33:c7:15:c7:f8:fb:fe:2a:15:cd:11:45 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Proton AG

Company registration number: CHE-354.686.492
Organization: Proton AG
Address: Route de la Galaise 32
State / Province: Genève
Locality: Plan-les-Ouates
Country: CH

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:c1:c6:99:33:c7:15:c7:f8:fb:fe:2a:15:cd:11:45
Serial Number (int): 19615333289720846263678611642192302405
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 51:26:24:4f:10:d6:ed:5b:39:3a:a6:cb:7c:45:36:f1:ab:e6:01:ab
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): c4:f9:85:65:c1:be:ad:67:b7:74:cf:b3:d3:34:9d:54:48:5c:f2:29
Fingerprint (sha256): 85:0e:82:71:da:ce:ef:3d:7c:56:2c:3b:36:4a:24:ca:c2:2b:bc:c3:5a:bb:7f:b0:b0:b9:2f:5b:f8:1b:d3:a3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Proton AG

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Proton AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

protonvpn.com
proton.me

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Proton AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMLDCCChSgAwIBAgIQDsHGmTPHFcf4+/4qFc0RRTANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjMwNDE3MDAwMDAwWhcNMjQwNDE2MjM1OTU5WjCCAT4xEzARBgsrBgEEAYI3
PAIBAxMCQ0gxGDAWBgsrBgEEAYI3PAIBAgwHR2Vuw6h2ZTEdMBsGA1UEDxMUUHJp
dmF0ZSBPcmdhbml6YXRpb24xGDAWBgNVBAUTD0NIRS0zNTQuNjg2LjQ5MjELMAkG
A1UEBhMCQ0gxEDAOBgNVBAgMB0dlbsOodmUxGDAWBgNVBAcTD1BsYW4tbGVzLU91
YXRlczEfMB0GA1UECRMWUm91dGUgZGUgbGEgR2FsYWlzZSAzMjESMBAGA1UEChMJ
UHJvdG9uIEFHMRIwEAYDVQQDEwlQcm90b24gQUcxHzAdBgorBgEEAYOeXwENEw9S
ZWdpc3RlcmVkIE1hcmsxEjAQBgorBgEEAYOeXwEDEwJHQjEdMBsGCisGAQQBg55f
AQQTDVVLMDAwMDM4NTE5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ8dVPgZjHxIPZvl36OnSuwQ5eJ12dojrZahiHLl0ISSPG9QtoF43oegjRNYMX
1B3qUHDr9CZdEYHIrbiw4gPM3K0NlVDqoh/diHI9TgnxRy7Fry/HPbfbRApNK1x5
FYH0T3KNLog67UfI+QNrS9ezlFwB40NLbM9wlTTS+uk0crDVZvitUvbtPfh2klCt
Xa5UZ2cG3XcmFjyzFywmDtW5ovntVua3wSYG2BH4gv445uIqhM4LFUpcfio+bz6I
bdzmUoxH3T4T/aolPtQt0Xkg9Vae0PixYQbjo3gNDVqjU9/iycQN6L8VVVl/sCOK
BXQ8ZHCwuBFr90wrGfFjeTknAgMBAAGjggcBMIIG/TAfBgNVHSMEGDAWgBS+n72N
V22Vta1jw5dOq6iEXToH9TAdBgNVHQ4EFgQUUSYkTxDW7Vs5OqbLfEU28avmAasw
IwYDVR0RBBwwGoINcHJvdG9udnBuLmNvbYIJcHJvdG9uLm1lMBMGA1UdJQQMMAoG
CCsGAQUFBwMfMIGlBgNVHR8EgZ0wgZowS6BJoEeGRWh0dHA6Ly9jcmwzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydFZlcmlmaWVkTWFya1JTQTQwOTZTSEEyNTYyMDIxQ0Ex
LmNybDBLoEmgR4ZFaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VmVy
aWZpZWRNYXJrUlNBNDA5NlNIQTI1NjIwMjFDQTEuY3JsMFAGA1UdIARJMEcwNwYK
YIZIAYb9bAACBTApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwDAYKKwYBBAGDnl8BATBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFZlcmlmaWVkTWFy
a1JTQTQwOTZTSEEyNTYyMDIxQ0ExLmNydDAMBgNVHRMBAf8EAjAAMIIE/AYIKwYB
BQUHAQwEggTuMIIE6qKCBOagggTiMIIE3jCCBNowggTWFg1pbWFnZS9zdmcreG1s
MCMwITAJBgUrDgMCGgUABBT0zZEhJ7/e+Y6WbnCQL/mk+L2UATCCBJ4WggSaZGF0
YTppbWFnZS9zdmcreG1sO2Jhc2U2NCxINHNJQUFBQUFBQUFDbzFVMjQ3YlJnejlG
VUw3MGdJejFOeWxDV3dIYVJlYnZCUXQwR3dlK3JKd2JWa1M2cFVNU1dzbitmcVM0
OHRxZ2Jhb0FVc2M4dkNRUENKbThmN3I4eDZPMVRDMmZiZk1OS29NcW03VGI5dXVY
bWFQbng5a21iMWZMY1pqRFFUc3huZHQ5OWU0V1IrcVpkWk0wK0ZkbnA5T0o3dzZz
Ui9xdkZzL1YrTmh2YW5HL09yUExza2o4UjdvZjB1K09uRHNYNFpOdGFQOENydHF5
dTgvMzkrQ1V1RjIybDQ0M3RROTJWVFJLS1Z5YXZGVzVsai9OK3pVYnFlR3BsWEda
ZEJVYmQxTTE5T3hyVTQvOVYrWG1RSUY3SUt6ZjlmdTk4dXM2enNhWmlhWHllRFA5
Vmo5TnZRRUlGR210dnNtRDJPMldrenR0SzlXRkpqNkRqNThYT1JueDZLR2Rydk1h
bDBZQWgzV1V3TjAvSVdMb0tLYW45U1hpLzNwOHY2aS9yaVd2d3YzN3NQRFE1WW9P
RmVIUUN3NW02OWt6MkJkaWJHMHhvcGdQWHBWQmdkSDBLWkVYVUlEWmNSWWtFTnFZ
NUJDRzFCQ2FvM1Jnc1BDQ1drczJnSzBKYmlRVm1PcG9VUkhBWDZDamxpU1A0VWhS
YStIQnFKQjQ0blFXVlNFVjZnbzFhRmxTSUhhZ05aVXdncnBDdlFlckVKSGgvUUNk
aGtoQzQyRlRnZkxYWEZIM0Y5aWhNUkNmUkNsQVRrSEJaQXpOa0ltbm5NaHptT012
OVp0UUJwRFRKRmxDUXFObmN0U2VFNXBTQUNObXFjeENtMFFDaXhOSGtXSktvS25E
Z1RKNTBvZ1ppZjRBWHlPd2xxTWhtMHZDR1VpZGM4RUJVak9GRVFTdVR4RG1ZVjZ1
eEZJem5XSmx6QzNHcEViamg0dE55TjFZSjBVZ1ExL0NJdTBwSksrdVBZaW9pY2R0
RWNUUkVnU21ZamFDdko0SW5RS1N5Tm9jRk93SWhoS2taNEVVeGk5TUo3RmtRd0lJ
b0ZCTW8xSWpOUUMwUXNTSmRoa2U1R3F3dmZiZnU3U2I3NmY1VC90cHl0Wkl0NVBI
d09xVUtZbGxMU3JSZVRCQ29WYXN5TEdwTG1kWnRVOGorTlpFcytxSlE4UllERG5n
eFVKU2wrUWhBbngveTU2U0l0ZW5CZWQ5OXpPOXJ5WTcvblZ2czM3TXV4L3VEdXMy
MjVTVC91MnE5YkRVMkZqOGFTRFZhNzhjYVpEb1Y1MXlPdlZZbHZ0eGhSbFE1ZDhG
NXdKUGc3cmJWdDEweVgxWDZqcHB0UEx6RWJlK3d5K2tVMUJkSjc4WnVZbjIzdTYw
Mk1HOVlYM3NXc251a1JmeG1yNG5TL3BYN3ZIc2FMcTQ5UWZnQjl5MCsvN1labWRt
bmFxemhPd1d4ZU9KMkR6QXU1M3U3SGllek43azNlbmYxYmV1M2xtZU0zTTMwNUpE
aGFBdzhkNjlUY1FpLzNFalFZQUFBPT0wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggIBAM6A5wP4KJEKkYeUhmNbm76/GJwa/1ndILyJzivPsjib
AlC9hPj7iBicEs0INnz9dTwfIcZSWgPkIca6qGmkOpM41hZL/PNlmiftcskNh6+k
KduSd9ZPAU4KJOvl/hetKvv9/tytDxDkcHxVXzHuGSxDMYtaCIrEpuaPLX7/ZXJB
mKt0I+PZDetuJSSenEDTu9kt2bN9oSkpKgovLmWVKEIRxO41TW6HraqDBi1W2Nyg
YBXggCAdEpCXQ5jMnZSdIn2Z1Vj8z3dXWqEyymAFa24HD23i2LvF3LKbl7DtWz5n
G4qKh6wEPe+QpeFsJo03uHBNjx2DX0unyjVyu4UlUrhwLQ+NB5NcMmPeC+/6CoVO
8WqW/b74P/jAPXF3RyUmrUZ051G2l0TeAyIgSZ7m1QaLiAi9oNMNCrSziW34vZJh
e/coi82Bn8TE8gikwrApm7Meyd+x4/89wo/bA9Xh7vmMZqomm15BbXuFopEqHhaM
sSA/JQWBsnuleQ9e10VsUIU4CfvYxAeN+hy1q+csm8Es3U3KTfvE4iFU/qiEzs+f
xpa05CPYO1CslFEmWF1af7zV7iACnzL2sD4O2KDQMSEIUE73U5jq5IJFkpRhnEOD
c3fmXR02ESA6Iv9XZUe+6JMOKJiX2ahu+DcafavcbiTn2fAEvBpTDhk+BFKoVgQi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PHVT4GYx8SD2b5d+jp0
rsEOXiddnaI62WoYhy5dCEkjxvULaBeN6HoI0TWDF9Qd6lBw6/QmXRGByK24sOID
zNytDZVQ6qIf3YhyPU4J8Ucuxa8vxz2320QKTStceRWB9E9yjS6IOu1HyPkDa0vX
s5RcAeNDS2zPcJU00vrpNHKw1Wb4rVL27T34dpJQrV2uVGdnBt13JhY8sxcsJg7V
uaL57Vbmt8EmBtgR+IL+OObiKoTOCxVKXH4qPm8+iG3c5lKMR90+E/2qJT7ULdF5
IPVWntD4sWEG46N4DQ1ao1Pf4snEDei/FVVZf7AjigV0PGRwsLgRa/dMKxnxY3k5
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19615333289720846263678611642192302405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-354.686.492'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plan-les-Ouates'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Route de la Galaise 32'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Proton AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Proton AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00003851909'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26376819850361620711439402173531350348964165735318051731111172053985421917600511171758213772781844178353128572734714121247432910288451267926703348082691444653105840400511459445556713980134905177327265401832653665338549840284707831973707222598219179209985190701617721103504497652130944111726638235620209570503409518327602523994931115003770035259645811712427254985160468127200982434203175668881791738361302013838861850375559443855696923850292540286863876070449820735385555007676957275850390863535181745509551958982474976197374000818557831895912069715876570337678349678843170889224258467829519960835900900441123779590439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5126244f10d6ed5b393aa6cb7c4536f1abe601ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protonvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proton.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1262 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															f4cd912127bfdef98e966e70902ff9a4f8bd9401
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAACo1U247bRgz9FUL70gIz1NylCWwHaRebvBQt0Gwe+rJwbVkS6pUMSWsn+fqS48tqgbaoAUsc8vCQPCJm8f7r8x6O1TC2fbfMNKoMqm7Tb9uuXmaPnx9kmb1fLcZjDQTsxndt99e4WR+qZdZM0+Fdnp9OJ7w6sR/qvFs/V+NhvanG/OrPLskj8R7of0u+OnDsX4ZNtaP8Crtqyu8/39+CUuF22l443tQ92VTRKKVyavFW5lj/N+zUbqeGplXGZdBUbd1M19OxrU4/9V+XmQIF7IKzf9fu98us6zsaZiaXyeDP9Vj9NvQEIFGmtvsmD2O2WkzttK9WFJj6Dj58XORnx6KGdrvMal0YAh3WUwN0/IWLoKKan9SXi/3p8v6i/riWvwv37sPDQ5YoOFeHQCw5m69kz2BdibG0xopgPXpVBgdH0KZEXUIDZcRYkENqY5BCG1BCao3RgsPCCWks2gK0JbiQVmOpoURHAX6CjliSP4UhRa+HBqJB44nQWVSEV6go1aFlSIHagNZUwgrpCvQerEJHh/QCdhkhC42FTgfLXXFH3F9ihMRCfRClATkHBZAzNkImnnMhzmOMv9ZtQBpDTJFlCQqNnctSeE5pSACNmqcxCm0QCixNHkWJKoKnDgTJ50ogZif4AXyOwlqMhm0vCGUidc8EBUjOFEQSuTxDmYV6uxFIznWJlzC3GpEbjh4tNyN1YJ0UgQ1/CIu0pJK+uPYioicdtEcTREgSmYjaCvJ4InQKSyNocFOwIhhKkZ4EUxi9MJ7FkQwIIoFBMo1IjNQC0QsSJdhke5Gqwvfbfu7Sb76f5T/tpytZIt5PHwOqUKYllLSrReTBCoVasyLGpLmdZtU8j+NZEs+qJQ8RYDDngxUJSl+QhAnx/y56SItenBed99zO9ryY7/nVvs37Mux/uDus225ST/u2q9bDU2Fj8aSDVa78caZDoV51yOvVYlvtxhRlQ5d8F5wJPg7rbVt10yX1X6jpptPLzEbe+wy+kU1BdJ78ZuYn23u602MG9YX3sWsnukRfxmr4nS/pX7vHsaLq49QfgB9y0+/7YZmdmnaqzhOwWxeOJ2DzAu53u7HiezN7k3enf1beu3lmeM3M305JDhaAw8d69TcQi/3EjQYAAA=='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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