Surfshark Holding B.V.

- Surfshark Holding B.V. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0a:46:5d:76:37:9d:75:e8:8b:51:4a:27:2a:4a:df:79 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Surfshark Holding B.V.

Company registration number: 77737067
Organization: Surfshark Holding B.V.
Address: Kabelweg 57
Locality: Amsterdam
Country: NL

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:46:5d:76:37:9d:75:e8:8b:51:4a:27:2a:4a:df:79
Serial Number (int): 13657636368174946651991951464261672825
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fb:c3:b1:73:0d:9a:d2:c7:e4:8c:74:59:77:73:a1:6f:2b:39:02:a2
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 7d:55:d9:40:2b:45:43:58:65:aa:c3:10:ac:35:f3:c5:4a:2f:ad:7b
Fingerprint (sha256): ba:82:33:b6:36:06:3b:8b:af:b8:83:c8:d3:d4:95:63:ea:e4:53:0a:1a:c0:fa:f2:2e:c4:72:38:60:e4:a9:f8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Surfshark Holding B.V.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Surfshark Holding B.V.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

surfshark.com

Other certificates including the domain name Surfshark Holding B.V

(limited to 100 certificates)

Certificate

The complete raw certificate details for Surfshark Holding B.V. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FVCIERXmlPXC/GWS5Mx
xai67DegxgHMJWZzr6YV89gI+uiwOfTeqEJ+Lsv9VhXTSpgjZg6zWj5YLuwUQdjz
px85ghEoYKEoUXnKE00slqgXlNJOlpRAC8NRtT64kxHwzLVgx24hIYD2pUIYl77p
PeK7CjCzSdbH1pnCR0LJUx9jMNMHP7Y3YI9sjmi+9CSkmiMtK+NtGpevG2ezf48s
g8ROYk1ZQSpjPUKf2vJR5t+MsnVpNpFnnNmentFATWeVMncNpt+Ju40BmRTbEbKe
k/fHvYH87KDm/QitAbH17pUjHUCheg2K7aJVcWL3tE//+03zgVt0FWFtGj22KGMK
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13657636368174946651991951464261672825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '77737067'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kabelweg 57'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Surfshark Holding B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Surfshark Holding B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6.112.107'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27309516309735633898874859988869070383993586081959318740997617785272792651626134259610351955925600264883003094369406612810843911813556632242098136880480927718604757220878181004233232193497045070170041004301944184982252231902367595025161814230335783153565812403286150079193592003571239497412883680509073011925422263842965341182388346080172267269004121578294693539444285540669205660139784816929464404469915642537463528852165604282016599795086267288736259904050396418711636110099687309181360272211068245093730409265741902658350855619615310429665146294053774684637257373901656065097058634589634206693250678175171413740123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbc3b1730d9ad2c7e48c74597773a16f2b3902a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfshark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															c560de3336862393a5d753ead520749a22cff51f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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