amt.thurmed.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 45:0b:7e:61:c8:ed:d4:2f:91:9a:6d:74:29:41:2e:14:4b:6b:c2:4b was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=amt.thurmed.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 45:0b:7e:61:c8:ed:d4:2f:91:9a:6d:74:29:41:2e:14:4b:6b:c2:4bSerial Number (int): 394176680806526234300829809962068254108456567371
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 69:19:c2:f2:91:88:8d:24:db:a0:93:87:e0:c6:35:94:e7:62:fb:7d
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 50:25:fc:72:7c:81:2a:c3:ab:f2:b0:cc:9e:53:18:8f:37:79:b5:d6
Fingerprint (sha256): b5:6f:9f:8e:02:01:02:25:d1:85:18:d9:5a:67:96:87:a2:ae:55:2a:15:ad:27:a6:2b:a9:51:40:2c:20:58:8e
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate amt.thurmed.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for amt.thurmed.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amt.thurmed.ch
Other certificates including the domain name thurmed.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for amt.thurmed.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH+DCCBeCgAwIBAgIURQt+Ycjt1C+Rmm10KUEuFEtrwkswDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDExMjA5 NDgyNloXDTI1MDExMjA5NDgyNlowGTEXMBUGA1UEAxMOYW10LnRodXJtZWQuY2gw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB42uKfK/C6doypj3oQvrY ZsfOlFyRonmVDSXEY/SPA1WAN2mrWDstd1dMY5tnxeKFPZyu05O4IgFfwSDXGNge /waZi8C6OL2j3LDWJxoXeJb9WVJwn1uCd73kcbUhWnQuaFMjqg4/ThjiWBNAXTeZ nkg/NqGOaJoIlZox5+Kamtl/v6fNvvdNSWdRlkucUEVILJKa2miEJ4Q2puCRSpth yLBNelhzLZTfM8Q9NNdIcvBLvwZ9RRKMLEzCH1zpKdT88GReiLZ4ustz/cZDzOQx Mr+ikDP4+PGT85EzYykR9ZxzR6Fn/Uo+bRDdB6iq8UQlChu0skvTVocAUnpdqrbF AgMBAAGjggP/MIID+zCBsgYIKwYBBQUHAQEEgaUwgaIwTAYIKwYBBQUHMAKGQGh0 dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci0xYjg2MzM4NS1mNGE5LTQ3ZmEtODhh NS0yYTVhYmZkNGExNjcwUgYIKwYBBQUHMAGGRmh0dHA6Ly9vY3NwLnN3aXNzc2ln bi5jaC9zaWduL29jcy1hYWNjY2VkNS02NmU4LTQwNjktOWIxYi1mZDI5YWI3M2Vm ZWMwbwYDVR0gBGgwZjAIBgZngQwBAgEwCAYGBACPegEGMFAGCGCFdAFZAgEBMEQw QgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3 aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3Js LnN3aXNzc2lnbi5jaC9jZHAtNjc5NzIzYjItODY0MS00NjQyLTg1MDAtZjZkMmZm MzdlNmJhMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8E BAMCBaAwGQYDVR0RBBIwEIIOYW10LnRodXJtZWQuY2gwHQYDVR0OBBYEFGkZwvKR iI0k26CTh+DGNZTnYvt9MB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsere MIIB9AYKKwYBBAHWeQIEAgSCAeQEggHgAd4AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4 eHAlCBcvo6odBxPTDAAAAYz9EqZXAAAEAwBHMEUCIQCoFqznjhG4p6b7zKIBp0Jj hzbAaW2C8eX1Gwlm/I0hPAIgUAM1FMafLxggjGRuzkQxkkzPxbd7kvPx0UiWTm7k 5/4AdQDPEVbu1S58r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAYz9Eqc8AAAE AwBGMEQCIBqjPBF760TEtZGYWYqgSvN0J9WfvBCzDYvWwA3YWGuVAiB9mBEaxhy/ f5lo+9EGeDJaABBmolFtCeQbZn63I+4GYAB2AMz7D2qFcQll/pWbU87psnwi6YVc DZeNtql+VMD+TA2wAAABjP0SqEEAAAQDAEcwRQIgK0jyyO8LKzRpzJjWE6WfsHS1 cW0SDvwnNPJJBCv/J2cCIQDXWBySYSvsO94QH7WgIESGZ/DadmAfazUgf53GLM80 QQB1AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjP0SqXIAAAQD AEYwRAIgB3BfmY3teKuZINI8s/s7NAVyKeV2RG/Hajj+YMh0kSUCIEQwA98tNyf6 eyQ8sZZHz5VyJKnieyvwr1Y7H4ItnCalMA0GCSqGSIb3DQEBCwUAA4ICAQCf1Bd3 kLVrXzfdqFjNBtgWMy3WeZmkZtYCzpiocNHbmisd3KBOm9QJ37Tv4jaRm1C2I4Ry cAnJYWBbExU1iZTdKZD2Urvvhl1f/jS6j9eY1AfzcLXFAyYHc7bbBT7nXtjNDVJk HKt46XaDxyJDkzGmj/hR26jIUof65lzwSaNMfh5TlIw2LWknn++Ywv3W+Zh713Jd IYU+25Ap2I1JxKJK32xWFVNLp8kF0uoaZSNwI32hTiOhTXruxB77sSb5f3hJusg+ IIxMLVqTbpJS+M7Skv3hHY1gqokS6RCoxxb11AJ6FjLJescVMy04h3zeyjhi6ZWS KxghJNXP1AC0RTjqOhveRhWv+P8IXrB5tf/lUf/ePy6laRY2HibPZv5XUjYSggx8 BAzShGjLwLnImpLNekObpKZmN/Ruc3wH/W5O3SDFTIj0p4DU/vECaZ6MvQkOVBil rAEun9w7qIKvwD820WTdsMoYGTbM/8V3n5o3sd14OVerpS3AINAt8ZFN5Ce+j6SX iI+Xz/FyT6vtt3JodyKA+mNTAyQxfMnrUDbEm5455urzJ8uCYmqz3ob9hGA21Tg1 bZeWAuiulqHdWe2OfaIOZfSiCpmbQ5fjAzb0Qt7Jw1Bo5gSen16/6IBPF15WmJKj aHKuIzlf0b4Z2ntwAuZvEuw924SKmlk6taoW6g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweNrinyvwunaMqY96EL6 2GbHzpRckaJ5lQ0lxGP0jwNVgDdpq1g7LXdXTGObZ8XihT2crtOTuCIBX8Eg1xjY Hv8GmYvAuji9o9yw1icaF3iW/VlScJ9bgne95HG1IVp0LmhTI6oOP04Y4lgTQF03 mZ5IPzahjmiaCJWaMefimprZf7+nzb73TUlnUZZLnFBFSCySmtpohCeENqbgkUqb YciwTXpYcy2U3zPEPTTXSHLwS78GfUUSjCxMwh9c6SnU/PBkXoi2eLrLc/3GQ8zk MTK/opAz+Pjxk/ORM2MpEfWcc0ehZ/1KPm0Q3QeoqvFEJQobtLJL01aHAFJ6Xaq2 xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 394176680806526234300829809962068254108456567371 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 09:48:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 09:48:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amt.thurmed.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24476137880533847018210174315150945084016853222396791312115440796371923863668907370615215361398974493257578433689428552815674951156676316836418315166031965292757216373601175976826778892259983311830911216392557266810844574064854739113758832318338752888469423206280128505047068695227360618023766495497802155977910074668215640348943841978563119885131778815646203094394779140886740954118645523044229918652438297488596856480955769554795950011591543256880950066718367051333844576799235564835403914175941803444810036582504399418628510637238181362605992008609755680855280477458661436797595725967153121440579805294954703140549 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amt.thurmed.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6919c2f291888d24dba09387e0c63594e762fb7d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes) 01de0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018cfd12a6570000040300473045022100a816ace78e11b8a7a6fbcca201a742638736c0696d82f1e5f51b0966fc8d213c022050033514c69f2f18208c646ece4431924ccfc5b77b92f3f1d148964e6ee4e7fe007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018cfd12a73c000004030046304402201aa33c117beb44c4b59198598aa04af37427d59fbc10b30d8bd6c00dd8586b9502207d98111ac61cbf7f9968fbd10678325a001066a2516d09e41b667eb723ee0660007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018cfd12a841000004030047304502202b48f2c8ef0b2b3469cc98d613a59fb074b5716d120efc2734f249042bff2767022100d7581c92612bec3bde101fb5a020448667f0da76601f6b35207f9dc62ccf34410075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018cfd12a9720000040300463044022007705f998ded78ab9920d23cb3fb3b34057229e576446fc76a38fe60c87491250220443003df2d3727fa7b243cb19647cf957224a9e27b2bf0af563b1f822d9c26a5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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