Department of Education

- Department of Education -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 02:04:1b:bb:b4:f5:55:1d:6a:c2:85:76:f0:cf:82:51 was issued on by DigiCert, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Department of Education

Company registration number: Government Entity
Organization: Department of Education
Address: 830 1st St NE Union CTR Plz
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:04:1b:bb:b4:f5:55:1d:6a:c2:85:76:f0:cf:82:51
Serial Number (int): 2679787675733550356301489109459763793
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ef:6e:e2:c9:df:1d:7d:9a:63:f7:c5:f5:31:7d:75:e1:02:cd:e5:2c
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 79:ce:52:c7:ed:63:e8:1d:4c:dc:4f:41:f7:3d:bf:1c:7e:27:ea:b8
Fingerprint (sha256): 9a:2c:55:a2:34:64:f7:be:43:df:98:68:d3:b7:8b:41:5b:7f:93:ff:c5:f1:33:00:9c:0b:7e:b1:1d:47:ef:96

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Department of Education

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Department of Education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

studentaid.gov
nsldsfap.ed.gov
fsapartners.ed.gov
test.studentaid.gov

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Department of Education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFbsbu+fk77qNrs6PlAx
MlAdqtePEbHMrgwIeqq0ATCdAVDUSFF+DEgHmqKuE1/+ReYSnDCCOlNi78z+iHx/
zxEU/uwzH7FQl9VTucEoKm5upg8+JOM01Tn3RSskjte2lt+zkC/Z83t6PA6YbijQ
BG4bxfUepNzfzA2xw7QM+FWT+0n3w6IHCYN4KprC7R6z3bZG9zSzj5SW2luvaeTW
PVNfEtu9Lhrtvdd1mGOdF74rYllSH7HX9+UeVcKmIFeajUL7M5h9xw17HuCLqpnJ
3GwL4FApZfU6seHxOQXnyyFa2Fi/DtMC4HKwploywxj/TpN8meQWRqH8FsKmHH04
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2679787675733550356301489109459763793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '830 1st St NE Union CTR Plz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7039743'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20745945623239451430969747723126728909463108418483569792165493246078751606990646886153022661894380978968945700233285658099343429054077682175405786054984793900630056922100261105397871571115803763481076900820981629520803531422626546253789851685099263473207522113351108943990319240908863360785480475745557360935050879016631774825082295743759259487597280166778111085582321832634354312519820809716028015365285766020285189205162611394058494933054847745002183484443894747384227807844548436765936485187413235131307177444961133178780337228039719847578069589697727122799304065502772969785475380491114593241065462641370288961709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef6ee2c9df1d7d9a63f7c5f5317d75e102cde52c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentaid.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsldsfap.ed.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsapartners.ed.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.studentaid.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															2fbeac7af4357df003e929ee69853927315a5fac
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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