NSF International

- NSF International -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0a:ca:48:04:64:eb:7b:de:4f:0b:33:3b:7f:b3:62:0b was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

NSF International

Company registration number: 800792743
Organization: NSF International
Address: 789 N Dixboro Rd
State / Province: Michigan
Locality: Ann Arbor
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:ca:48:04:64:eb:7b:de:4f:0b:33:3b:7f:b3:62:0b
Serial Number (int): 14342584604910490389023329980368773643
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:8d:e5:92:6c:b2:88:3a:07:6e:0c:8c:47:77:86:43:04:d1:49:61
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): be:72:70:58:0e:33:c6:47:5f:a9:5b:7e:8f:6d:d9:d3:f2:2e:de:44
Fingerprint (sha256): b8:ce:0e:3f:9c:55:ed:63:11:58:9c:5a:92:af:20:f3:31:7d:e9:64:5d:48:dd:75:30:19:3e:51:6e:46:89:eb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate NSF International

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for NSF International

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nsf.org
cs.nsf.org

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for NSF International in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEjQUdwFE09UjgziQSEb
EJKFCc0SZ9LrMojr42SDiE/2xRDUXvX6v4HHAA5C+dPpIT2oYzza+CayJOYFlbI4
FObX4JPvLLaPozR5pXGW6sjLFiA6xyTSVbVFrJvyOkdHXvXX7Xj2MTBV6soARYlT
xff3VkkzDQnqCdRExZJfd+/Rm07C5GGHCq2R0S+9avrlwdAxPCsRCtiJN4yeEytQ
iK/fWWHjU734O5qKEQoJrzO4kAc09XrB3Y1+m00KvG3XUjDCkEFAoEcIvfS8cnUk
U6zv9uCUFQU517FDVTQJEmJwPUzLF7iKn+CTB9K/uhcOC6O7ozEuUR4ncpyvGNsw
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14342584604910490389023329980368773643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800792743'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '789 N Dixboro Rd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSF International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSF International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5608734'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25788520010972806624187773671374486100482302814476020103360102299084611733783549301956070369154494594764409261279675406051013710231963273726943173234647876957002894540179813019196567389606468227951607015369990997965659799244333885495793939014848383506161194406041348212521451813098805081198899645441590772250992114130552817470056391620856322465221365196502220504757498514374737807737579317010805257976162407491982864481242430103491743119042043924981965271609294758747759668925369510531416509933319233656601257002722804396826138846484989463752398648402825547414711391521457958385430752742526350382810177455958164975837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b18de5926cb2883a076e0c8c4777864304d14961
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.nsf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1402 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															1d71b1883ac51d2d7500cebebc9749b8ae3f815d
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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