giropay.sparkasse-rhein-nahe.de

- Sparkasse Rhein-Nahe -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 1c:b2:63:b2:b6:7b:6e:38:95:5a:c8:5f:28:21:b3:08:31:14:10:30 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sparkasse Rhein-Nahe

Company registration number: HRA 3085
Organization: Sparkasse Rhein-Nahe
Organization unit: Sparkasse Rhein-Nahe
State / Province: Rheinland-Pfalz
Locality: Bad Kreuznach
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:b2:63:b2:b6:7b:6e:38:95:5a:c8:5f:28:21:b3:08:31:14:10:30
Serial Number (int): 163829959157534897083696889842732194747523534896
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 0e:48:d8:8a:9f:f7:2e:db:2c:0f:c9:59:24:cb:2c:59:66:cb:5d:f1
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): b7:ac:3e:df:2e:f5:0c:78:e1:82:df:0f:f8:bb:d4:88:99:7d:39:c4
Fingerprint (sha256): a1:29:c0:ca:4e:cf:2c:c9:90:68:82:57:20:9b:84:41:21:6c:2d:15:83:84:15:17:17:41:fc:bf:4b:3d:f9:9d

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate giropay.sparkasse-rhein-nahe.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giropay.sparkasse-rhein-nahe.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giropay.sparkasse-rhein-nahe.de

Other certificates including the domain name sparkasse-rhein-nahe.de

(limited to 100 certificates)
giropay.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
psd2-xs2a.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de

Certificate

The complete raw certificate details for giropay.sparkasse-rhein-nahe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xChrUdtTZGBDWUwYQC5
XWS7fLGiHhVKpGqxyUcNJSZErsvIip/JYeGmEU948kdkN6ED3wTEjawuhC1HpQJM
bgsYcWR0Bi4eiATJRDHxci+Hc8R0MKwPl//NYWQTqoDnofi7ubb8pw1opo7JUxMm
mWKtrwEsAuXjHzdy2fcRbW/KnkgxU8T0QYuooYd50IERQf9Fbrvs4gC98Ei6qSpQ
voN7NQ4508d2lkVWeRTU8Es3y9AikMwVij6Djlf/CXeyrBz0Xglzdi1FM+mtvp1I
ecINBsOaWsOSQ9KNKBU9jsCK0yqpjdDCNzSSG/2UdzW31XgBcGRWPCbRwjO5BxK5
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163829959157534897083696889842732194747523534896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 13:23:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-01 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bad Kreuznach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 3085'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bad Kreuznach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Rhein-Nahe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Rhein-Nahe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'giropay.sparkasse-rhein-nahe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29169249770269065945964965419617754864945794823176680166685443126048567002274966791658515368778951341050387821922152897112846752981541756985477957774383424383359517342542652390374487240172290771456833259287809288399716479714760011474680451438900368519374691395070676174490812916462092322524588778312948345818612637979742156237705527176707106760727990537387669061427558761542291059074939321736365899230947443996374888718422496364088611514201473578615104301907984890369339527337228312913292944544782125848028325535621582255942557049545145422809173383018059776382367547953131818788610569405929010507385679057741109442887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giropay.sparkasse-rhein-nahe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e48d88a9ff72edb2c0fc95924cb2c5966cb5df1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001696cf5069d0000040300483046022100b1f701761f6794943bb5eb05a806bd107a8728ec37944718d037d667bd96336a022100ee545d3224f5eed50f98304840c2ca6316124d126e54601331aaeba82cbad9f70075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001696cf5085f00000403004630440220718013e391244a5271a6e11c837e9e40aa62bb38fe3b4ff5da57f77819767d3c022007f6dd52f420208ed5205a250f97754f6b59c9de812242d2dda457675f7679120076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001696cf5077c000004030047304502204526a4210299aa9c49f34793d5d29d627c9f992eb85699c3b65a66eabef20dc702210084486364e2ed53b15d5f24de270a2c8330d8fe2ef21b697323c3a3c7c47357d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005c659d44ae427db337068f3946826eaea17e1792d485339d12413845f7ffe1d73a7c8469602915c5f12592320bd4787caa0de3031d2016835abbf9be739ca4df2c4959e40b80d2ab661f26667705d65a3329f63281b3df1ed46767f83a2ce73261ac57565f20fc9f632ad6f93ea1c3e0fcd33a5d25f15cc9b8caf067569ec189ecd0119a02cfea0dafa5d8be315107ee2d0ef4620858def45e54fc16cc09c4dbce01ddfc4efacb0e7eeaf0b5dec98499dd67b29bb6508a343622b91b38da36a6a1d9e5441b54e42a1425df0383201876c837b7b7b34118b72c3584705d9b322d700d30bdf432015459f972284f7cdb9e64f8476309c8d40a8a575954135bf70a66fbbaa9ec59899b305b3863cc6ffdbe7c832cbf698e8b25144a646924527ed0c1962b24ce7048d18eaef3a45e1361073c0159507d3559366b92b44d51b9e5374983c68100fad7863c9ad4216d51e0ad57b7361f4a3b7a981eb058855d7eda155ca0504e02189bb61d06db896be86915206d8c6ef796ecb24d2eef8523c45f80ed38712c5477ee5b4dac85be01304f6d7657e6f32b54d725db3f88e341ea32bb0380c4f6994960ff2c0c94a84ba6536d6833ab5a4abf2f77ebeb4d0ef12e12448d8fb8ecf0c56fa7b4d093183792d96b4606f568c8aa7c14b091df819f5c98ec6b48bf6ced2e5ff9f5f52682e89cfd01fad833091ca8a8915752a9dfe605f144