color-explorer-test.rmpaint.com

- BASF Digital Solutions GmbH -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:7c:21:bf:15:a8:80:09:f6:f7:cb:e4:0e:33:40:39 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BASF Digital Solutions GmbH

Organization: BASF Digital Solutions GmbH
Locality: Ludwigshafen am Rhein
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:7c:21:bf:15:a8:80:09:f6:f7:cb:e4:0e:33:40:39
Serial Number (int): 17924493214461075093969668710128107577
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:55:4c:89:01:e4:14:fd:cf:07:dd:35:d9:90:cf:31:4a:60:d3:50
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 0f:cf:5a:62:23:62:8a:79:79:4f:01:aa:ff:09:9e:2a:e4:df:94:1a
Fingerprint (sha256): a7:17:b6:49:46:b5:78:48:e8:d5:bc:21:07:aa:28:8f:8b:fe:2f:1a:3f:4a:16:bd:e7:7d:67:ec:36:be:e9:a8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate color-explorer-test.rmpaint.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for color-explorer-test.rmpaint.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

color-explorer-test.rmpaint.com
lacour-test.coatings.basf.com
colorexplorer-test.rmpaint.com
color-online-test.glasurit.com
coloronline-test.glasurit.com
formula-finder-test.baslac.com
formula-finder-test.baslac.com.cn
cts-formulafinder-test.basf.com

Other certificates including the domain name rmpaint.com

(limited to 100 certificates)
www.promoshop.glasurit.com
www.promoshop.glasurit.com
msds-prod.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
test-knowhow.glasurit.com
comlib.glasurit.com
knowhow.glasurit.com
color-explorer-test.rmpaint.com
www.rmpaint.com
www.findadblue.de
msds-prod.baslac.com
colormotion.de
www.surfacepolyamide.info
www.promoshop.glasurit.com
in-touch.rmpaint.com
in-touch.rmpaint.com
knowhow.glasurit.com
www.promoshop.glasurit.com
comlib.glasurit.com
www.surface-polyamide.eu
www.surface-polyamide.eu
rep.basf.com
refinity.basf.com
www.premiumpartners.rmpaint.com
basf-cis.com
techinfo.baslac.com
colormotion.de
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
www.premiumpartners.rmpaint.com
agro.news
www.promoshop.glasurit.com
in-touch.rmpaint.com
techinfo.baslac.com
ton-schaum.net
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
knowhow.glasurit.com
color-online.glasurit.com
productivity.rmpaint.com
www.rmpaint.com
rmpaint.com
*.basf.com
productivity.rmpaint.com
test-knowhow.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
*.basf.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
in-touch.rmpaint.com
www.promoshop.glasurit.com
www.premiumpartners.rmpaint.com
knowhow.glasurit.com
color-online.glasurit.com
agro.news
color-explorer-prod.rmpaint.com
agro.news
comlib.glasurit.com
www.concept1865.info
www.promoshop.glasurit.com
www.agilis.rmpaint.com
aware.rmpaint.com
color-online.glasurit.com
productivity.rmpaint.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
www.surfacepolyamide.info
techinfo-test.baslac.com
comlib.glasurit.com
www.concept1865.info
www.premiumpartners.rmpaint.com
www.surfacepolyamide.info
comlib.glasurit.com
color-explorer-test.rmpaint.com
clayfoam.net
colormotion.de
in-touch.rmpaint.com
www.premiumpartners.rmpaint.com
knowhow.glasurit.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.findadblue.de
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
productivity.rmpaint.com
knowhow.glasurit.com
msds.baslac.com
in-touch.rmpaint.com
test-knowhow.glasurit.com
agro.news
www.premiumpartners.rmpaint.com
in-touch.rmpaint.com

Certificate

The complete raw certificate details for color-explorer-test.rmpaint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw9JSM6eAIlgBR2fuhWvo
+BCenFPMIkOPHi6l1nUxcjSZ3cu1D/Xt/1q6pZoT6htOTJOYX+smTSIZ/TQzg/ds
UxrB+fc1KAlo3lvybLPloi3OqmkVwzJZCms1Uxf7+GmUIay35RFennesM9fj73kE
+G6+tQdZCDozYtYN56z1+mbVRWvs40KNggfWh5/XJ3k5regqssfF4frBY4/UTA16
oKzvuz5B098zwcU2b1YNT9m9Cy3EnUTEzugUbirgBrNt7Yuu9+80IcO7ssxtDmeX
m3Y1NvQJZeujsoUeRclOhOgf1hpZwPanhAo7h7CJFZ6vEjMwiWCuUR9We02hiD8o
76qCx6mTMEaKWlom89hAEL2HQSYHQ4Q7MGfKDhoNcdN6FRQqC50ckLkJjoM8r5Cq
vY2GTJC1dG7UiyB/aXb02D9bKE8Hpm4VbX5z9dJFnf/iG83lLp1nxBdI0KcUtRt9
VmF9OEoBzzH96xMnHV6yumqABcQO0DAytqEIWreEAXcs2ZXjMWc1ChYc/FClG3ez
BQZ8nzlB/+6s24PwDK98cvRkPMB/uySManG72cOfA0YTsJ0QZpZTaCZw0IARe4zD
Y5CJtIv2FnNGAxumZhi0dbC0ZqECGUmjqYoEFhaP5DF+vXevTdFPbTFrGUOVavZ3
dzKgJrCvnFuZlyd6kOIMriMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17924493214461075093969668710128107577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen am Rhein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Digital Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'color-explorer-test.rmpaint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798882293384147397557198453770431354346188196609854669914548008608418143271842340021697605329745563137460120386404794592635112475287528178606680283858989586607851700302961922019481624463642099429250714583104282885475156133688926157633657734961940535929781678775099890543758788289327712360472860589000302069023787058415964296497456168990718758665252312791434258146233842203319124889054626740564028846365745447649944504730233170137832709373234392814903088327428820258123808299806421368326473199583550703239338212242034754956164555811303475468910687623786112043562423296291931296100281394521173355997542868947043784898595246926538505891472290587505455168834753235438682074980853108817481804744255433559625214698602397813146823924531467684155822968385679981988107453175622508094128937295431152340279541690690259978779186933486095381345926392761532881613839033835138488193492082769567227981900669372475872700138211226287597230233365483519060538258489298831744167306151659635767772382121350397821491998855729245732634965718003533103672182410415150962425475420596370764496306393298763632875070443623563153845362356426830805801891707510327392809449483985362777355110443315461716727366369577734325701889001061525535318160726216769382908735011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14554c8901e414fdcf07dd35d990cf314a60d350
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'color-explorer-test.rmpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacour-test.coatings.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorexplorer-test.rmpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'color-online-test.glasurit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloronline-test.glasurit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-finder-test.baslac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-finder-test.baslac.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-formulafinder-test.basf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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