Digitec Galaxus AG

- Digitec Galaxus AG -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0f:fe:81:3e:f9:a5:9d:93:af:08:d7:bb:e0:92:77:71 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Digitec Galaxus AG

Company registration number: CHE-109.049.266
Organization: Digitec Galaxus AG
Address: Pfingstweidstrasse 60
Locality: Zürich
Country: CH

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:fe:81:3e:f9:a5:9d:93:af:08:d7:bb:e0:92:77:71
Serial Number (int): 21259884759088515602650565221245155185
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4f:10:2f:fb:dd:c7:f4:b5:4a:9a:c5:d0:7f:d6:a6:31:09:b9:20:06
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): cf:bb:6f:fb:df:c6:94:a8:6c:34:4d:82:b8:1a:7c:21:06:fd:7e:d9
Fingerprint (sha256): b9:e5:11:8d:5a:f9:7d:4d:0b:c3:0f:31:24:f3:08:fa:34:e3:b2:70:b7:25:e0:fe:03:e3:21:d5:17:84:ff:37

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Digitec Galaxus AG

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Digitec Galaxus AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digitec.ch
digit.ec

Certificate

The complete raw certificate details for Digitec Galaxus AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXTPdcrL7mrPO2XL0igu
bR7JGaTXoAdyUKh/uifLp8SssGcvKlxSVdW0MsTkTop6p7295IJ4llqNlTP7UPmz
Rw8bKPlaMaj9beV2jpakwzkDiuqOsJRrF+WWonsCEYYNHr2PDeLyCXBYzOMJXtVR
Z42a1jBuxkXebiEO9SwMTMMdaw3AGQPpNDbK2J00ce7i3hKFrPQJhaXKqE9ZbTQO
UffR5GXRh5bsf8Csu9qmv+eMWyRcA7UAJeD7MCbfWb/7KKo/mxmcHiB0N/liJDsL
LIa3D1R23uIedR9vCu2DaMHTSefttj9C5Tuxgve0M4vqu7nOIELe5v4KAhnMY4wF
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21259884759088515602650565221245155185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-109.049.266'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pfingstweidstrasse 60'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digitec Galaxus AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digitec Galaxus AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '640697'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23411687769411855356450427544048439238340174803928637734404100135606824675986710197678648373575893240456281858408818173824525127838200716206126638127368903244386483718673742829138597038179811103102967902570868259561162994618304532553317002085314802210756313465103387992899683965263170142584632214963563067380117643426746976402840563227690446827832871465198728435214511606093097185816548860392496969124717284929526123077040313342202955581515553390156279539824784244813209019630999672106374598686009983378567398597014773292203015454168916128244528516842147706930861181927937061321492436245043192559870281378517891155209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f102ffbddc7f4b54a9ac5d07fd6a63109b92006
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digit.ec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															2e7bcbe8e0e91ea837b5375bf080c74039740afe
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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